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//from the editor/ 




he age of embedded computing is here. Analysts predict that within this decade, we'll see tens of 
billions of embedded computational devices entering our daily lives. And the possibilities for these "smart" 
devices are literally endless: connected vehicles, appliances, utility meters, medical devices, industrial con¬ 
trollers, and even a contraption that monitors how much alcohol your local bartender pours into your cocktail. 

In this embedded-focused issue, we explore why Java is the best language choice for embedded develop¬ 
ment. In "Embedded Everywhere," Oracle's Terrence Barr talks about why Java's write once, run anywhere 
technology is perfectly positioned for the coming wave of embedded devices. He sees Java in the embedded 
space creating an open, standardized technology infrastructure. What's more, Java offers 9 million developers 
who can apply their knowledge to embedded development. Barr talks about getting started with embedded 
development using a Keil board and also explores what embedded device growth will mean for big data. 

In " Top Ten Reasons for Using Java in Embedded Apps," Simon Ritter makes a case for Java as the go-to 
language for embedded. "We already have a wheel," he says. "Let's not keep inventing new ones." 

We also bring you two stories of embedded Java in action. In "Java Arrives on a 
$25 Board," we talk with Raspberry Pi Foundation Cofounder Eben Upton about 
the low-cost programmable computer and Java's role. In 'The Future of Money," 
we explore the emerging world of digital currency and introduce you to the Royal 
Canadian Mint's digital currency, MintChip, which runs on the Java Card platform. 

The embedded space presents exciting opportunities for Java developers. It's a 
new year, and a really great time to be a Java developer. 


//send us your feedback / 

We'll review all 
suggestions for future 
improvements. 
Depending on volume, 
some messages may 
not get a direct reply. 


Caroline Kvitka, Editor in Chief ^ 
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FINDYOUR 
JUG HERE 

My local and global JUGs 
are great places to network 
both for knowledge and work. 

My global JUG introduces 
me to Java developers all 
over the world. 

Regina ten Bruggencate 
JDuchess 



O 

< 


< 

< 


~3 



I 


“0 


GO 

ZD 

\- 



ORACLE.COM/JAVAMAGAZINE //////////////// ////////////////// JANUARY/FEBRUARY2013 













































EDITORIAL 

Editor in Chief 

Caroline Kvitka 

Community Editors 

Cassandra Clark, Sonya Barry, 

Yolande Poirier 

Java in Action Editor 

Michelle Kovac 

Technology Editors 

Janice Heiss, Tori Wieldt 

Contributing Writer 

Kevin Farnham 

Contributing Editors 

Claire Breen, Blair Campbell, Karen Perkins 

DESIGN 

Senior Creative Director 

Francisco G Delgadillo 

Senior Design Director 

Suemi Lam 

Design Director 

Richard Merchan 

Contributing Designers 

Jaime Ferrand, Nicholas Pavkovic 

Production Designers 

Sheila Brennan, Kathy Cygnarowicz 


PUBLISHING 

Vice President 

Jeff Spicer 

Publisher 

Jennifer Hamilton +1.650.506.3794 

Audience Development and 
Operations Director 

Karin Kinnear +1.650.506.1985 

ADVERTISING SALES 

Associate Publisher 

Kyle Walkenhorst +1.323.340.8585 

Northwest and Central U.S. 

Tom Cometa +1.510.339.2403 

Southwest U.S. and LAD 

Shaun Mehr +1.949.923.1660 

Northeast U.S. and EMEA/APAC 

Mark_Makinney +1.805.709.4745 

Advertising Sales Assistant 

Cindy Elhai +1.626.396.9400 x 201 

Mailing-List Rentals 

Contact your sales representative. 

RESOURCES 

Oracle Products 

+1.800.367.8674 (U.S./Canada) 

Oracle Services 

+1.888.283.0591 (U.S.) 

Oracle Press Books 

oracjepressbooks.com 


ARTICLE SUBMISSION 

If you are interested in submitting an article, please e-mail the editors. 

SUBSCRIPTION INFORMATION 

Subscriptions are complimentary for qualified individuals who complete the 
subscription form. 

MAGAZINE CUSTOMER SERVICE 

iava@halldata.com Phone +1.847.763.9635 

PRIVACY 

Oracle Publishing allows sharing of its mailing list with selected third parties. If you prefer 
that your mailing address or e-mail address not be included in this program, contact 
C usto mer Service. 


Copyright © 2013, Oracle and/or its affiliates. All Rights Reserved. No part of this publication may be reprinted or otherwise 
reproduced without permission from the editors. JAVA MAGAZINE IS PROVIDED ON AN “AS IS” BASIS. ORACLE EXPRESSLY 
DISCLAIMS ALL WARRANTIES, WHETHER EXPRESS OR IMPLIED. IN NO EVENT SHALL ORACLE BE LIABLE FOR ANY 
DAMAGES OF ANY KIND ARISING FROM YOUR USE OF OR RELIANCE ON ANY INFORMATION PROVIDED HEREIN. The 
information is intended to outline our general product direction. It is intended for information purposes only, and may not be 
incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied 
upon in making purchasing decisions. The development, release, and timing of any features or functionality described for Oracle’s 
products remains at the sole discretion of Oracle. Oracle and Java are registered trademarks of Oracle Corporation and/or its 
affiliates. Other names may be trademarks of their respective owners. 

Java Magazine is published bimonthly with a free subscription price by 
Oracle, 500 Oracle Parkway, MS 0PL-3C, Redwood City, CA 94065-1600. 

Digital Publishing byTexterity 



ORACLE.COM/JAVAMAGAZINE //////////////// ////////////////// JANUARY/FEBRUARY2013 


Learn Java 

On Demand 

— Oracle University— 



>/ Complete Classroom Content 

✓ Highest Rated Instructors 

✓ Immediate Online Access 

✓ Search, Pause & Rewind Anytime 


/-\ 

Preview Now 





































//java nation / JavaOne Brazil / 




JAVAONE 

LOOKS FORWARD 


PHOTOGRAPHS BY LUCIANA AITH, 
ORQUESTRA DE IMAGENS 


JavaOne Brazil took place in Sao Paulo, 
Brazil, December4-6. Latin America is 
an important development hub, and it 
looks as though JavaOne Brazil, now in 
its third year, is here to stay. "We con¬ 
tinually come back to Latin America 
because of the dedication the commu¬ 
nity has to driving continued innovation 


for Java," said Oracle's Henrik Stahl in 
kicking off the Java Strategy and Java 
Technical keynotes on the first day of the 
conference. He noted that the success of 
Java depends on technological innova¬ 
tion, strong stewardship from Oracle, 
and community participation. "The Latin 
American Java community (especially in 


Brazil) is a shining example of how to be 
a positive contributor to Java," he said. 

Oracle's Georges Saab discussed some 
of the recent and upcoming changes 
to Java. "In addition to the incremental 
improvements to Java 7, we have also 
increased the set of platforms supported 
by Oracle from Linux, Windows, and 
Oracle Solaris to now also include Mac 
OS X and Linux/ARM for ARM-based 
PCs such as the Raspberry Pi and emerg¬ 
ing ARM-based microservers." 

Oracle's Staffan Friberg provided an 
overview of some changes coming in 
Java 8, including lambda expressions, 
removal of the permanent generation 
(PermGen) heap, improved date and 
time APIs, and improved security. 

Oracle's Judson Althoff started his talk 
off with a bang. "The Internet of Things 
is on a collision course with big data, 
and this is a huge opportunity for devel¬ 
opers," he said. Althoff noted that a car 
embedded with sensors for fuel effi¬ 
ciency, temperature, and tire pressure 
can generate a petabyte of data a day. 

When a "blue screen of death" 
appeared for the Technical keynote, 
presenters gladly went on without their 
slides. What followed was a collection of 
demos, including JavaFX on a tablet and 
a look at Project Easel in NetBeans. 

Throughout the conference, attendees 
chose from dozens of sessions, more 
than half of which were selected by the 
community, and six hands-on labs. 
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DUKE’S CHOICE LAD WINNERS HONORED 



Top: TQTVD’s David Britto with Stephen 
Chin (left), Bruno Souza, and Yara 
Senger. Center: TIVIT’s Einar Saukas 
and Fabiano Cury with Souza, Chin, and 
Senger. Bottom: CPqD Foundation’s 
Sonia Mayumi Kutiishi and Hugo Cesar 
with Souza, Chin, and Senger. 


PHOTOGRAPHS BY LUCIANA AITH, ORQUESTRA DE IMAGENS 


At JavaOne Brazil, winners of the 
first regional Duke's Choice Awards 
were recognized for their innovative 
use of Java. 

The winners of the Duke's 
Choice Awards LAD are TQTVD 
Software, TIVITSoftware, and CPqD 
Foundation. While all of the winners 
hail from Brazil, nominations were 
received from across the region. 
Nominees included NeoTropic's 
Kuwaiba project and Vortexbird's 
Zathura Code Generator project 

happening in Colombia. Judges 
included Yara and Vinicius Senger 
of Soujava Brazil and Alexis Lopez of 
ColombiaJUG. 

HERE'S A LOOK AT EACH WINNER: 

TQTVD Software's AstroTV project 
is the Brazilian middleware compli¬ 
ant with the Ginga specification that 
allows full interactivity, extended 
content programming, and porta¬ 
bility. The Java-based Ginga specifi¬ 
cation is the intermediate software 
layer that enables the develop¬ 
ment of interactive applications for 
digital TV independently from the 
hardware platform of digital receiv¬ 
ers manufacturers (set-top boxes). 
AstroTV has been embedded in 
more than 3 million devices. 


TIVIT Software's Central de Cessao 
de Credito (C3) project is a Java- 
based high-performance scalable 
transactional distributed system 
that intermediates and manages 
all credit assignment operations 
between financial institutions in 
Brazil and tracks credit ownership. It 
was developed as a result of BACEN 
(the Central Bank of Brazil) identify¬ 
ing irregular credit assignment oper¬ 
ations between financial institutions 
that created a deficit of RS4.3 billion 

i 

in the Brazilian banking system. 

CPqD Foundation's SMTVI 
(Multiplatform Services for Digital 
Interactive TV) project dramatically 
improved the digital literacy of the 
majority of the Brazilian popula¬ 
tion. This population has insufficient 
financial resources to keep up with 
new technological developments; 

TV is its only technology resource. 
The project included the creation of 
interactive digital TV applications 
in the areas of health, retirement, 
employment, chat, weather, news, 
e-commerce, education, and games. 
The use of Java technology allowed 
the design of a distributed, scalable, 
and service-based architecture. 


Geeks Ride Again 



Java enthusiasts donned bike 
helmets and Duke's bike jerseys 
on the Saturday before JavaOne 
Brazil for a riding tour of Sao 
Paulo. At this now-traditional 
preconference ride, more than 
20 participants enjoyed cycling 
from Bicycle Park through down¬ 
town on street lanes closed off 
for bicyclists. The ride was 30 
kilometers, but participants 
could opt to take the subway for 
part of the trip. 


PHOTOGRAPH BY TORI WIELDT 
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Catch the sights and sounds of Devoxx 
2012. 


PHOTOGRAPHS COURTESY OF DEVOXX 


DEVOXX 

2012 

INNOVATES 



Devoxx, the biggest Java conference in 
Europe, hosted 3,400 attendees from 40 
countries November 14-16 in Brussels, 
Belgium. Through word of mouth, it sold out 
sixweeksin advanceand had hundredsof 
developers on the waiting list. The confer¬ 
ence is "for developers, by developers," and 
that's the key to its success, according to 
attendees. In 200 technical sessions, 190 
well-known Java community experts talked 
about the latest products, frameworks, Java 
language improvements, and more. 

Conference innovation included a room 
display monitor infrastructure that used 
Oracle Java SE Embedded running on a 
Raspberry Pi and a rating application for 


attendees to like or dislike sessions. Oracle's 
Jasper Potts created an interactive schedule 
using JavaFX for attendees' convenience. 
Parleys, the Java e-learning Website, was 
redesigned with HTML5 and GlassFish, 
and allowed speakers to post their slides 
online before their talks and then sync the 
soundtracks with the slides. During the 
conference, attendees participated in hands- 
on workshops and enjoyed coding with their 
peers in the hackergarten, which hosted 
Stephen Chin's NightHacking and a live cod¬ 
ing project called Code Story. 

The keynote was introduced by five danc¬ 
ing humanoid Nao robots, setting the 
stage for a talk by Oracle's Nandini Ramani 
about technical advances and the latest 
Java embedded technologies. "Java contin¬ 
ues to drive the applications and devices 
thatenrich our interactivity with the world 
around us," she said. 

Oracle technologists presented details 
of improvements to the Java platform. Joe 
Darcy and DaliborTopic discussed the latest 
update to JDK 7 and the upcoming features 
in JDK 8. Jasper Potts, Jonathan Giles, Jim 
Weaver, and Michael Heinricks presented 
eight talks on effective client development 
with JavaFX using its UI controls, TableView, 
and Scene Builder. Simon Ritter, Stephen 
Chin, and Daniel Blaukopf talked about 
programming and front-end development 
on devices with Java embedded. Shaun 
Smith, Marek Potociar, Arun Gupta, Jitendra 
Kotamraju, and David Delabasse presented 
the evolution of Java persistence, JSON pro- 
cessing, JAX-RS, and WebSocket in a series 
of sessions overthe three days. 
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DEV0XX4KIDS 


The first Devoxx4Kids one-day coding workshops took place 
October 13 and October 20 in Brussels, Belgium (in Flemish 
and French). One of the speakers was a Nao robot that talked 
about the fun of learning programming and showed off its 
karate moves. Sixty students age 11 to 14 attended three ses¬ 
sions where they programmed Lego Mindstorm and Mars 
Rover robots and coded with Scratch, a drag-and-drop pro¬ 
gramming interface to create interactive stories and games. 

Stephan Janssen, the organizer behind the popular Devoxx 
Java conference, was inspired to organize this event by his son 
"My 11-year-old son wanted to learn programming, and I coul< 
not find any content in Flemish," he said. He partnered with 
Tasha Carl, who organized robotic workshops with Greenlight 
for Girls, an organization encouragingyoung girls to considers 
future in science, technology, engineering, or math. 

At the Devoxx keynote in November, Janssen announced 
that Java user groups and developers can use his content and 
Web infrastructure to replicate Devoxx4Kids in their regions. 
"The workshops were really fun and such a rewarding experi¬ 
ence," he said. 

So far, Devoxx4Kids events are being organized in the 
Netherlands, the UK, and France. 


PHOTOGRAPHS COURTESY OF DEVOXX; TRIDIUM BY ORANGE PHOTOGRAPHY 
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Tridium Wins Oracle 
Excellence Award 

Tridium, which develops solutions for connecting 
devices to the enterprise, has won the 2012 Oracle 
Excellence Award for Java Business Innovation. The 

company's Java-based Niagara Framework integrates 
diverse systems and devices, regardless of commu¬ 
nication protocol, into a unified platform that can be 
easily managed and controlled in real time overthe 
internet using a standard Web browser. The frame¬ 
work facilitates remote energy metering, home auto¬ 
mation, and industrial process management. 

Tridium was recognized for using Java embedded 
technology and Java SE to create new possibilities 
for addressing how devices and systems connect 
and interact with each other, as well as with the core enterprise platform. Its 
Niagara Framework has been implemented in varied application environ¬ 
ments across many different business sectors. Tridium has applied Java's 
entire platform spectrum, from embedded to enterprise, to create a uniform 
software environment that integrates microdevices with each other and links 

them back to the enterprise applications of which they are components. 

_ a 



Tridium’s John Sublett 
(left) with Oracle’s 
Judson Althoff 


NightHacking Tour 

Java Evangelist Stephen Chin recently wrapped up 
his three-week Ni ghtHacking Tour across Europe on 
a BMW motorcycle. He went to the Devoxx and J Fa 11 
conferences and five Java user group events, and in¬ 
terviewed more than 30 NightHackers in 7 countries. 
Highlights of the tour included hacking events in 
London, England; Munich, Germany; Turin, Italy; and 
Lyon and Paris, France; and a behind-the-scenes tour 
at Aldebaran Robotics. Watch all of the interviews. 



Oracle’s Yolande Poirier 
chats with Stephen Chin. 
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HITACHI DEMONSTRATES SMART 
SENSOR INTEGRATION WITH THE CLOUD 



AtJavaOne 2012, Hitachi's OSGi Super] Engine Framework was deployed to integrate data 
collection from smart sensors (scattered throughout the conference venue) with the cloud. 

The framework applies Oracle Java SE Embedded to provide the sensors with decision-making 
intelligence and instrument diagnostics. The sensors collected more than 200,000 light, 
temperature, humidity, and energy measurements in a two-day period. 

The raw measurements were preprocessed by the Java Embedded Super] Engine applica¬ 
tion (which ran on a GlobalScale Technologies Mirabox device). The preprocessed results were 
transferred to a SeeControl cloud-based global data analysis application, which collated and 
processed the data into graphic displays and made them available on the Web. 

The demonstration was an illustration of the emerging machine-to-machine (M2M) 
Internet of Things that was a key focus of the very first lava Em bedded @ JavaOne conference. 



2 


ipelines on 



Oracle commissioned a recent survey 
by machine-to-machine (M2M) mar¬ 
ket research firm Beecham Research, 
which revealed that development of 
automated M2M data processing pipe¬ 
lines, in which information gathered by 
remote sensors in embedded devices 
is transferred to data centers for fur¬ 
ther analysis, is rapidly increasing. The 
global survey included end users, major 
product original-equipment manu¬ 
facturers (OEMs), systems integrators, 
mobile network operators, and M2M 
platform providers. 

Most survey respondents viewed 
M2M data pipelines as being critically 
important. 


A full 


75 percent said their 
M2M projects are utilized to create new 
services BSJSH 85 percent noted 
that the large volumes of data that are 
passed from the remote embedded 
devices to the data center create new 
performance issues 


Efficiently filter¬ 
ing and processingthe data to enable 
its use for making timely decisions was 
cited as another difficulty. 

View the complete results. 


ART BY l-HUA CHEN 
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FEATURED JAVA.NET PROJECT 

MSRP 



This diagram displays the MSRP concept. 


Java.net's Message Session Relay 
Protocol (MSRP) project (RFC 4975) 
started out as a 2008 Google Summer 
of Code project. Founder Joao Antunes 
wanted to create a library to provide 
litsi. an open source Java video chat 
application, with file transfer capabil¬ 
ity via Session Initiation Protocol (SIP, 
RFC 3261). Antunes preferred creating 
a full library rather than a Jitsi client, 
so the code could be used in any Java 
SIP application that requires file trans¬ 
fer capability. 

In 2010, Tom Uijldert, of 
ContactMakers, took over MSRP proj¬ 
ect leadership duties. Fie is currently 
the primary developer, and introduced 
ContactMakers to the features and 
capabilities the MSRP library provides. 
"The MSRP library provides an ideal 
means for integrating VoIP [Voice over 
IP] and chat into a single platform, 
due to its SIP connectivity and 
standards-based programming 
model," he says. As a result, 
ContactMakers is currently integrating 
the library into its call center platform, 
and they have also become a corpo¬ 
rate sponsor of the MSRP project. 

The project has come a long way in 
a very short time. In late November 
2012, Version 1.0.4 was released. 
Antunes says, "Today, the project 


implements all of the requirements 
of an MSRP peer." "It's now ready to 
be deployed in the real world," adds 
Uijldert. 

What's coming up? Uijldert lists 
several potential enhancements, 
including integration with the 
Mobicents JAIN SLEE platform, and 
the development of a C# version of the 
MSRP library. Fie says that the big¬ 
gest challenges for this project will be 
the addition of secure communica¬ 
tion, and possible support of relaying 
( RFC 4976 ). And Uijldert is actively 
seeking assistance with all this work: 
"Anyone interested in helping out with 
the additional functionality is hereby 
invited to contact us," he says. 

Reflecting on open source and the 
MSRP project, Antunes says, "The 
open source spirit is great! With open 
source, you are making the world go 
forward. Plus, working on an open 
source project is good for your resume. 
Just sprinkle your code with sufficient 
comments, and apply good coding 
conventions. That is the best way 
foryour project to invite third -party 
contributions." 
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JAVA USER GROUP PROFILE 

PHILADELPHIA AREA 
JAVA USERS’ GROUP 



The Phila d elp hia Area Java Users' 
Group (PhillyJUG) was founded in 
2000 by Dave Fecak, a technical 
recruiter, and Dr. John Lewis, a former 
professor at Vi I la nova University and 
coauthorof a popularearlyjava text¬ 
book. About 30 developers attended 
the first meeting in March 2000. 

In 2005, the group was named to 
Sun'sTop 25 program and then to 
the expanded Top 50 program. These 
programs recognized the leading 
JUGs. "That recognition and some 
good connections have helped us to 
attract some very high-profile industry 
names, such as Rod Johnson (Spring), 


Gavin King (Hibernate), Marc Fleury 
(JBoss), Neal Ford (ThoughtWorks), 
and Eric S. Raymond (The Cathedral 
and the Bazaar')," says Fecak. 

Today, more than 1,300 members 
subscribe to the group's e-mail list. 
About eight meetings are held annu¬ 
ally, and these regularly draw more 
than 100 attendees, and in the 200 
rangeforthe most-popularspeakers. 

Looking ahead, "We are currently 
transitioning from a Java language 
focus to a JVM [Java Virtual Machine] 
focus, which the membership feels will 
keep us current with industry trends," 
says Fecak. 

Fecak has thought a great deal 
about theJUG leader role. "I would 
encourage JUG leaders to always be 
thinking of howto help their member¬ 
ship. When [vendors] approach me 
about sponsoring a meeting, I always 
ask what I can get for my members. 
Sponsors want to reach audiences, and 
many sponsors understand that they 
are building corporate goodwill in the 
community for their brand." However, 
he notes that Phi I ly] UG does not allow 
pure product demonstrations or any 
sales activity. 
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OptionsCity 
Wins Chicago 
Innovation Award 


What platform would you choose if your business required 
solving complex mathematical decision-making problems 
within milliseconds, where the correctness of those results 
directly and significantly affects your customers' financial 
reserves? OptionsCity Software, which develops electronic 
financial market trading solutions, chose Java. In October, 
the company's Freeway multiasset algorithmic trading 
platform won a Chicago Innovation Award. These awards 
honor innovative new products and services brought to 
market from the Chicago area. 

OptionsCity Directorof Client Technology Freddy Guime 
calls the win "a Cinderella story for Java in the financial 
industry." The OptionsCity development team "solved 
complex problems to achieve the performance needed for 
a submillisecond trading platform, which is necessary to 
compete in this space," he says. 

Guime notes, "Even though there were naysayers when 
we chose Java as our platform, the decision allowed us 
to quickly take overthis space, culminating with (what 
we consider) the first commercially viable Algo Trading 
Platform. And that includes the innovation of the Algo 
Store, which allows algorithm developers to be able to 
purchase 'components' of an algorithm." 

Within six years, OptionsCity has gone from unknown 
to being one of the big players in the options trading 
platform space in Chicago and New York. Need reliable, 
time-critical mathematical algorithm performance in your 
startup product? Think Java. 
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End of Public 
Updates for 
Java SE 6 


Have you updated to Java SE 7? Along with 
great features such as fork/join, NIO, and 
Project Coin, java SE 7 is being updated 
and patched regularly, java SE 7 has been 
out for more than a year and is ready to 
download. 

The last publicly available release of 
JDK 6 is to be released in February 
2013. After February 19, all new secu¬ 
rity updates, patches, and fixes for Java 
SE 6 and Java SE 5 will be available only 
through My Oracle Support and will 
thus require a commercial license with 
Oracle. It's important for developers and 
systems administrators either to make 
the transition over to Java SE7orto work 
with Oracle to get updates via the Java SE 
Support program. 

In the event that you are not ready 
to migrate to Java SE 7, Oracle offers 
Java SE support for continued access to 
critical bugfixes and security fixes as 
well as general maintenance for JDK 6. 
Additionally, Oracle Java SE Advanced 
and Oracle Java SE Suite offer superior 
diagnostics and manageability tools that 
minimize the costs of deployment, moni¬ 
toring, and maintenance of Java-based 
IT envi ronments. 



JAVA CHAMPION PROFILE 

ADAM BIEN 


Adam Bien is a German 
entrepreneur, architect, 
programmer, author, 
and speaker. He became 
a Java Champion in 
January 2007. 

Java Magazine: W h e re 
did you grow up? 

Bien: In a small town in 
Bavaria, Germany. 

Java Magazine: FI o w d i d 
you first become inter¬ 
ested in computers and 
programming? 

Bien: I was always 
interested in space¬ 
ships, aliens, UFOs, 
robots, and black holes. 
Computers were a 
natural progression. 

I had my first contact 
with a computer when I 
was eight years old. 

Java Magazine: What 
wasyourfirst computer 
and yourfirst program¬ 
ming language? 

Bien: My first computer 
was a ZX Spectrum 
128K. I got it when I was 
12 and immediately 
started to program 
in Basic. Flowever, I 


thought everything 
happened inside REM 
statements. My pro¬ 
grams always inter¬ 
preted without error, 
but nothing actually 
happened. I wondered 
about this. After getting 
the basics, I was proud 
to learn my first pat¬ 
tern: GOSUB instead of 
GOTO. 

Java Magazine: What 
wasyourfirst program - 
mingjob? 

Bien: I had to optimize 
the wire protocol of an 
early Oracle database 
on a VAX. I didn't have 
a VMS OS, so I used 
Linux to compile the 
C++ code. 

Java Magazine: What do 
you enjoy for fun and 
relaxation? 

Bien: I try to enjoy 
everything. Life is 
too short. I consider 
Java programming as 
fun and relaxation. 
Someday, I would 
like to be able to read 
more non-IT books 
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and do more sports. 
Right now I have to 
catch the unchecked 
La c kOfTi m e Exce pti o n 
way of trying that— 
with an empty catch 
block, unfortunately. 
Java Magazine: What 
happens on yourtypical 
day off from work? 

Bien: I try to spend all 
my time with family 
—but there are really 
no days off. For free¬ 
lancers, the day after a 
free day, you'll regret it. 
Java Magazine: What 
"side effects" of your 
career do you enjoy 
the most? 

Bien: With Java, you get 
endless opportunities 


to learn new things. 
Indeed, Java still feels 
to me like the new hot 
stuff, and this keeps my 
work exciting and abso¬ 
lutely not boring. 

Java Magazine: Has 
being a Java Champion 
changed your daily life? 
Bien: As Java 
Champion, I was 
"exposed" to JUG lead¬ 
ers, and I learned about 
the wealth of worldwide 
JUG events. I regu¬ 
larly speak at local JUG 
events when I travel on 
business. It has also 
been pleasant to meet 
lots of passionate, tal¬ 
ented, and opinionated 
fellowjava Champions. 
Java Magazine: What 
are you looking forward 
to in the coming years? 
Bien: Lots of interest- 
ingthingswill happen 
in the near future for 
Java: JavaFX, Project 
Nashorn, lambdas, Java 
EE 7. And I cannot wait 
for Jigsaw. Java's future 
is bright. 
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EVENTS 

Embedded World FEBRUARY26-28, 
NUREMBERG, GERMANY 

The Embedded World Exhibition & 
Conference has been the gathering 
place of the international embedded 
community for more than a decade. The 
event focuses on all fields of embed¬ 
ded systems development. In addition 
to discussing hardware, software, and 
tools, embedded experts tackle the latest 
issues around embedded system design. 
Machine-to-machine is a key theme of 
the event. The conference also offers an 
extensive exhibition hall with more 
than 800 exhibitors. 
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FEBRUARY 

FOSDEM 

FEBRUARY 2-3 
BRUSSELS, BELGIUM 
FOSDEM is a free, noncommer¬ 
cial event that offers open source 
communities a place to meet, 
share ideas, and collaborate. 

Jfokus 2013 

FEBRUARY 4-6 
STOCKHOLM, SWEDEN 
jfokus is the largest annual confer¬ 
ence for everyone who works with 
java in Sweden. 

Java Israel 

FEBRUARY 14 
TEL AVIV, ISRAEL 

Clojure, Grails, Groovy, java Virtual 
Machine, JRuby. Ruby, and Scala 
are all on the agenda at this one- 
dayjava event. 

DevNexus 

FEBRUARY 18-19 
ATLANTA, GEORGIA 
Presented by the Atlanta java 
Users Group, this conference for 
Java developers offers seven tracks 
with three keynotes and more 
than 50 sessions. 

Hadooplnnovation Summit 

FEBRUARY 20-21 
SAN DIEGO, CALIFORNIA 
This event brings together data 
scientists, engineers, and archi¬ 
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tects pioneering Hadoop innova¬ 
tion for two days of keynote pre¬ 
sentations, interactive workshops, 
and networking opportunities. 

Mobile World Congress 

FEBRUARY 25-28 
BARCELONA, SPAIN 
Explore the new mobile horizon 
at Mobile World Congress. This 
industry-leading event includes 
a thought-leadership conference 
with keynotes and panel discus¬ 
sions, a product and technology 
exhibition with 1,500 exhibitors, 
and an awards program. 

MARCH 

QConLondon 

MARCH 4-5 (TRAINING), 

MARCH 6-8 (CONFERENCE) 
LONDON, ENGLAND 
QCon London is the seventh 
annual London enterprise soft¬ 
ware development conference 
designed for developers, team 
leads, architects, and project 
management. 

33rd Degree Conference 

MARCH 13-15 
WARSAW, POLAND 
This conference for Java masters 
features three days of Java tech¬ 
nology talks. Birds-of-a-feather 
and unconference sessions allow 
informal discussions. In-depth 
workshops are also included. 


CodeMotion 

MARCH 24 
MADRID, SPAIN 
This event, by and for technol¬ 
ogy communities, gathers tech¬ 
nicians, developers, and stu¬ 
dents. Organized by user groups 
fora variety of technologies, 
CodeMotion is a way for attendees 
to step out of their comfort zones 
and discuss innovation in coding 
practices. 

EclipseCon North America 

MARCH 25-28 
BOSTON, MASSACHUSETTS 
This conference focuses on shar¬ 
ing best practices, insights, case 
studies, and innovations in the 
Eclipse community and in soft¬ 
ware development. 

Devoxx London 

MARCH 26-27 
LONDON, ENGLAND 
Devoxx France 

MARCH 27-29 
PARIS, FRANCE 
Following the success of the 
11th Devoxx java conference in 
November, Devoxx moves to the 
UK for the first time and France for 
the second time. The proximity of 
these back-to-back conferences 
allows speakers to present at both. 
At the Paris event, 75 percent of 
sessions are in French and 25 per- 
centin English. 
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JAVA BOOKS 


ORACLE 

AUTHOR 

PODCASTS 

Our favorite Java 
authors give you the 
inside scoop on their 
books. 


§ 


Benjamin Evans 
and Martijn Verburg 

discuss The Well- 
Grounded Java 

Developer. 


§ 


Jim Weaver and 
Stephen Chin discuss 
Pro JavaFX 2. 



Distnbjtd, 
Embedded 
jnd Re.il 1 rrs 
Java ijstems 



DISTRIBUTED, EMBEDDED 
AND REAL-TIME JAVA SYSTEMS 

M. Teresa Higuera-Toledano and 
AndyJ. Wellings (Editors) 
Springer (February 2012) 

This book is aimed primar¬ 
ily at researchers in real¬ 
time embedded systems, 
particularly those who wish 
to understand the current 
state of the art in using Java 
in this domain. Much of the 
work in real-time distrib¬ 
uted, embedded, and real¬ 
time Java has focused on 
the Real-Time Specification 
for Java as the underlying 
base technology, and conse¬ 
quently many of the chap¬ 
ters in this book address 
issues with, or solve prob¬ 
lems using, this framework. 



HtJotM 


CONTINUOUS ENTERPRISE 

DEVELOPMENT IN JAVA 

(EARLY RELEASE) 

By Andrew Lee Rubinger, 

Dan Allen, and Aslak Knutsen 
O'Reilly Media (September 
2012 ) 

This practical book shows 
you howto perform con¬ 
tinuous development, using 
a testing platform called 
Arquillian that the authors 
built with the JBoss com¬ 
munity. This platform acts 
as the missing link between 
testing and development. 
The authors demonstrate 
how testing is the very 
foundation of develop¬ 
ment—essential for learn¬ 
ing and critical for ensuring 
that code is consumable, 
complete, and correct. Find 
out how Arquillian helps 
you document your project 
in the form of test cases. 
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DEVOPS FOR DEVELOPERS 

By Michael Huttermann 
Apress (September 2012) 
DevOps for Developers 
delivers a practical, thor¬ 
ough introduction to 
approaches, processes, and 
tools to foster collaboration 
between software devel¬ 
opment and operations. 
Efforts of agile software 
development often end at 
the transition phase from 
development to operations. 
This book covers the deliv¬ 
ery of software—"the last 
mile"—with lean practices 
for shipping the software 
to production and making 
it available to end users, 
together with the integra¬ 
tion of operations with 
earlier project phases 
(elaboration, construction, 
and transition). 



JAVA EE DEVELOPMENT 

WITH ECLIPSE 

By Deepak Vohra 
Packt (December 2012) 

Java EE Development with 
Eclipse is a practical guide 
for using the most- 
commonly-used Java EE 
technologies and frame¬ 
works in the Eclipse inte¬ 
grated development envi¬ 
ronment (IDE). The book 
focuses on developing 
applications with some of 
these technologies using 
the project facets in 
Eclipse 3.7 and its enhance¬ 
ment Oracle Enterprise 
Pack for Eclipse 12c. It 
starts with a discussion of 
Enterprise JavaBeans (EJB) 
3.0 database persistence 
with Oracle WebLogic 
Server and Oracle Database, 
Express Edition. 
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JCP Executive Series 

Credit Suisse 
Discusses the 

Java Community 

Process 

Susanne Cech Previtali and Victor Grazi share Credit 
Suisse’s distinctive perspective. BY JANICE]. HEISS 

W e continue our series of inter¬ 
views with distinguished 
members of the Executive 
Committee of the Java Community 
Process (JCP) with Credit Suisse, a 
financial services group of companies 
with headquarters in Switzerland and 
operations in more than 50 countries. 
Credit Suisse is the first non technology 
vendor on the Executive Committee of 
the JCP, elected in June 2010 and re¬ 
elected in November 2012. Credit Suisse 
is what Mi he Milinhovich of the Eclipse 
Foundation calls a "Java user company" 
whose focus is to improve the Java 
platform in order to meet both its cus¬ 
tomers' and its own business needs. As 
such, the company brings to the JCP a 
unique and valued perspective. 
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Victor Grazi and 
Susanne Cech 
Previtali take a 
breather on Credit 
Suisse’s rooftop deck 
in Manhattan. 


We met with Credit Suisse's two 
representatives on the]CP, Dr. 

Susanne Cech Previtali and Victor 
Grazi. Cech Previtali, a member of 
the Infrastructure Architecture group 
at Credit Suisse, is the Java platform 
architect responsible for Credit Suisse's 
Java Application Platform (JAP) and 
the related construction guidelines for 
the development of large-scale Java 
EE applications. Grazi, who recently 
won the annual JCP award as Best Spec 
Lead for his work on JSR 354, Money 
and Currency API, is a Java Champion 
who works both in investment banking 
architecture and as a technical consul¬ 
tant and Java evangelist. 

Java Magazine: Credit Suisse was 
recently re-elected to the Executive 
Committee of the JCP. While your 
position statement is available online, 
would you like to offer a general sum¬ 
mary of your position going forward? 
Credit Suisse: We are very happy about 


this great and encouraging result. We 
will continue to bring in our customer 
view in arguing for strong, open, and 
stable standards that can be imple¬ 
mented by any vendor or the open 
source community for a competitive 
market. We want to bring in our exper¬ 
tise in standardization and architec¬ 
ture governance and to continue our 
active participation in Expert Groups 
and as spec leads. We would like to aid 
in increasing university participation 
as spec leads and Expert Group mem¬ 
bers at the faculty level—for example, 
contributing to high-quality specifica¬ 
tions; also, we think students should 
be included in making contributions at 
the development level—for example, 
as part of the Adopt-a-JSR initiative of 
the Java user groups [JUGsJ. 

Java Magazine: Credit Suisse, the first 
nontechnology vendor on the JCP, has 
been characterized as a Java user com¬ 
pany with the goal of improving Java 


in order to better meet your own and 
your customers' needs. This gives you 
a different perspective from a com¬ 
pany that creates and sells software. 
Does you r perspective clash with the 
perspectives of other JCP members? 
Does it offer an opportunity for other 
Executive Committee members to 
better understand how companies 
use Java? 

Credit Suisse: Credit Suisse sees its role 
within the Java community in general, 
and the Executive Committee more 
specifically, as a representative cus¬ 
tomer interested in building mission- 
critical applications on strong, open, 
and stable standards to secure our 
investments. Credit Suisse previously 
contributed to the development of Java 
EE specifications through participation 
in many customer advisory boards, 
through statements of requirements 
for extensions to the core Java-related 
products in use, and through active 
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participation in JSRs. 

The JCP Executive Committee is still 
dominated by vendors. Major custom¬ 
ers of java technologies as the end 
users were not integrated in the pro¬ 
cess and, as such, could not participate 
in guiding the development and evolu¬ 
tion of java technology. Credit Suisse 
stands in close relationship with the 
vendors. Our experiences and feedback 
with the concrete application of the 
java technologies in, for example, our 
java Application Platform are also inter¬ 
esting and relevant for the vendors. 

Java Magazine: Why did you decide to 
join the jCP in 2010? How might your 
presence in the jCP help Credit Suisse? 
Credit Suisse: Oracle nominated 
Credit Suisse to run for the Executive 
Committee seat of the java EE/SE 
Executive Committee. Credit Suisse 
was elected by the jCP community with 
77 percent for a ratified seat starting in 
june 2010, and was recently confirmed 
with 85 percent. Credit Suisse was 
among the first financial institutes to 
embrace Web and java technologies. 

It was the first Swiss bank to provide a 
Web-based payments solution for its 
customers back in 1997, and its 1999 
product, YouTrade, was one of the first 
client trading applications on the mar¬ 
ket. Credit Suisse developed an inter¬ 
nal standard based on java EE called 
the java Application Platform [jAP], 
which helped industrialize develop¬ 
ment and operations of our java EE 
applications. jAP also established 


many of the platform-as-a-service 

[PaaS] concepts in 2004 that now 

contribute to more than USS40 mil- 

■ 

lion of avoided costs per year. jAP fea¬ 
tured one of the first large-scale SOA 
implementations, included the first 
ubiquitous PKI [public key infrastruc¬ 
ture], and reduced the server footprint 
through consolidation on shared serv¬ 
ers. In addition, it pioneered the adop¬ 
tion of numerous java EE technologies 
including transaction monitors, jSF 
[javaServer Faces], and portal. 

Today, Credit Suisse invests signifi¬ 
cant amounts peryearin the devel¬ 
opment of new and maintenance 
of existing java EE applications, and 
owns more than 30 million lines of 
java code. Going forward, Credit Suisse 
intends to steadily increase that 
investment as we move more workload 
from the mainframe back end to our 
java EE platform. 

Java Magazine: Does you r vision of 
java EE differ from that of other jCP 
Executive Committee members? 

Credit Suisse: Our general vision of 
java EE is focused on the support of 
cloud features and modularization. 

The standardization of PaaS features 
such as provisioning, multitenancy, 
elasticity, and the deployment of appli¬ 
cations in the cloud are crucial for 
developers and operation. The modu¬ 
larization of the java SE platform and 
the subsequent possibility of better 
capturing dependencies and ver¬ 
sions across modules are important 
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As JCP representatives, Grazi and Cech Previtali offer a customer 
view in arguing for strong, open, and stable standards. 


for large-scale applications. These are 
major changes with major impact to 
the java platform and thus have been 
moved from java EE 7 to java EE 8. The 
current vision is common, although we 
may have differences about roadmaps 
and timelines. 

Java Magazine: HowhastheJCP 
changed since Oracle acquired Sun 
Microsystems? 

Credit Suisse: The most important 
change is the jCP.next initiative, which 
is a commitment to greater transpar¬ 
ency, participation, and openness. JCP 
.next.l, JSR 348, Towands a New Version 
of the Java Commu nity Pr ocess, laid 
the foundation for greater transpar¬ 
ency by requiring, rather than suggest¬ 
ing, that all development is done on 
open mailing lists and issue trackers. 
Furthermore, the recruiting process for 
Expert Group members will be publicly 
viewable, with transparent disdo- 


CHANGE IS GOOD 

“The most 

important change 

is theJCP.next 
initiative, which 
is a commitment 
to greater 
transparency, 
participation, and 
openness.” 
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THE CHALLENGE 


“Trying to build consensus is difficult 
because people have individual 
ideas about best practices... 
uncovering all of the use cases 
and coming up with a robust 
implementation is the overriding goal.” 


sure. TCK [Technology 
Compatibility Kit] test¬ 
ing process results 
will be investigated; 
currently, the pub¬ 
lic is rarely aware of 
the results of the TCK 
testing process. All of 
these developments 
are designed to result 
in a more public, open, 
accessible, and trans¬ 
parent JCP. 

JCP.next.2, JSR 355, JCP Executive 
Committee Merge, addresses the merg¬ 
ing of the two Executive Committees 
(Java SE/EE and Java ME) and thus lays 
the foundation for one platform. 

JCP.next.3, JSR 358, A Major_Revisioii 
of the Java Commu nity Pr ocess. 

revises the JSPA [Java Specification 
Participation Agreement]. This JSR 
will make changes to the JSPA, the 
process document, and the Executive 
Committee's standing rules with the 
goals of further improving the orga¬ 
nization's processes, correcting prob¬ 
lems that have become apparent over 
recent years, and clarifying language to 
reduce ambiguity. 

Java Magazine: What structural changes 
would you like to see in the JCP? 

Credit Suisse: Openness, transparent 
licensing models, ease of participation, 
broad participation of the Java com¬ 
munity, and awareness of the impor¬ 
tance of technology governance. 

Java Magazine: Has Oracle delivered on 
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the promise of increased transparency 
and openness in the JCP? 

Credit Suisse: Yes. Oracle is a member 
of the Executive Committee and has 
agreed and committed to JCP.next.l 
and JCP.next.2 and collaborates on 
JCP.next.3. 

Java Magazine: How could Oracle have 
increased participation in the JCP? 
Credit Suisse: The inclusion of the 
JUGs in the Executive Committee is 
a great success, because it raises the 
awareness at the right level. 

Java Magazine: Are there ways that 
the JCP could better serve the Java 
community? 

Credit Suisse: The JCP drives the evolu¬ 
tion of a programming language and 
its ecosystems and has become a very 
important asset for the Java commu¬ 
nity. By relating the needs of the users 
with those of the technology providers, 
the JCP can ensure that Java contin¬ 
ues to be one of the top programming 
languages. We should also not forget 
about the next generation, and make 
sure that faculty and students con¬ 
tinue to see the value of Java. 

Java Magazine: What is your biggest 
complaint about the JCP? 

Credit Suisse: The Java community is 
great and very active, but not all users 
of Java technology are aware of the 
importance and impact of technology 
governance. The JSRs are developed by 
the JCP community, and so perhaps we 
can do better at promoting ourselves 
to include more people and compa¬ 


nies to engage in the evolution of 
Java technology. 

Java Magazine: There seems to be a 
risk that members of Expert Groups 
in the JCP can be subtly influenced by 
their own use cases, which suggests 
that there is a challenge in remaining 
objective about what a specification 
needs and does not need. How do you 
filter out any biases you might have 
related to the influence of your own 
use cases? 

Credit Suisse: Trying to build consen¬ 
sus is difficult because people have 
individual ideas about best practices, 
which at times may conflict. There is 
some ego involved in this, too, but 
uncovering all of the use cases and 
coming up with a robust implemen¬ 
tation is the overriding goal. All spec 
leads have similar challenges, includ¬ 
ing finding the time while still manag¬ 
ing their day jobs. Also, even when you 
find the time, it is difficult to get the 
other members involved, because they 
also have their own day jobs. 

Java Magazine: Do you have any sug¬ 
gested improvements forJava.net as it 
relates to leading a JSR group? 

Credit Suisse: Java.net is the JSR spec 
lead's best friend. It provides a wiki, 
source control, a mail list, archives, 
really everything you need to manage 
a JSR. We are very impressed with the 
fast feedback that the JCP provides 
for support issues. It would be great 
if some performance-based incen¬ 
tives could be provided to the Expert 
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Developers won’t need to reinvent 
the wheel in creating financial 
applications, say Cech Previtali and 
Grazi, as a result of JSR 354. 


Groups—perhaps some 
awards for most valuable 
contributor. 

Java Magazine: Te11 us 
some potential improve¬ 
ments for creators and 
users of financial applica¬ 
tions that are in the works 
as a result of JSR 354. How 
will their work be made 
easier? 

Credit Suisse: For one 

thing, developers won't 
need to reinvent the wheel when creat¬ 
ing financial applications. A common 
error is to use a float or double to rep¬ 
resent financial values. However, these 
formats are not designed for accuracy, 
and can easily produce rounding errors 
in the nth decimal place. Because 
accountants don't appreciate rounding 
errors, a lot of thought needs to go into 
how to make these precise. In addition, 
JSR 354 can help with formatting. In 
the US and Europe, most countries use 
very standard formats to express num¬ 
bers, but countries such as India use 
lakhs and crores, which are specified 
quite differently from anything cur¬ 
rently available in the Java formatters. 
This will improve with JSR 354. 

Also, rounding rules are important. 

In the US, it's standard to round up for 
5 or more and to round down from 1 to 
4. But different countries have more- 
exotic rules for rounding. 

Java Magazine: In walking the fine line 
between respecting standards and 


encouraging innovation, 
does the JCP err too far in 
one direction? 

Credit Suisse: As custom¬ 
ers, we counton the 
standardization of tech¬ 
nology because it gives 
us flexibility in choosing 
products and, thus, reduc¬ 
ing vendor lock-in. Some 
people argue that there 
should be at least two 
implementations avail¬ 
able before the standardization. But 
what about migration paths of the 
existing implementation? What about 
migration paths for the customers who 
already have used that existing imple¬ 
mentation? This could result in very 
weak standards, costly migrations, or 
both. Standardizing too early is prob¬ 
lematic, because immature technol¬ 
ogy does not provide enough useful 
"material." Standardizing too late 
is costly and probably causes major 
changes for customers who switch to 
a standard technology. It's a delicate 
balance. </article> 


Janice J. Heiss is the Java acquisitions 
editor at Oracle and a technology editor at 
Java Magazine. 

/I LEARN MORE 

• Java Community Process 

• Credit Suisse 


PROMOTING CHOICE 

“We count on the 

standardization of 

technology because 
it gives us flexibility 
in choosing products 
and, thus, reducing 
vendor lock-in.” 
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Globalize Your Business 



Melissa Data can help you globalize your applications as you expand operations to other countries or 
reach new customers in emerging markets. As a world leading data quality vendor, we offer solutions to 
verify, correct and standardize addresses in over 240 countries. Eliminate returns, cut postage expenses, 
prevent fraud and keep your customers happy by verifying their address before you send a package. 

• Reduce address correction fees - save up to $10 per package 

• Efficiently validate and correct addresses every time you ship 

• Maintain high customer satisfaction 


Accurate data . Delivered . 


✓ 

Address Verification 

✓ 

IP Location 

✓ 

ID Verification 

✓ 

Name Parsing 

✓ 

Email Verfication 

✓ 

Phone Verification 

✓ 

GeoCoding 

✓ 

Record Matching 


www.MelissaData.com/global 
or call 1-800-MELISSA (634-4772) 


MilaIMkfeMDATA 


Your Partner in Data Quality 


On premise or remote APIs available 








(embedded ) 


EMBEDDED EVERYWHERE 


Terrence Barr on Java and the Internet of Things BY STEVE MELOAN 



y<?i/ 


W hile number estimates might 
vary, it's clear that within 
this decade we will see tens 
of billions of new embedded compu¬ 
tational devices entering our everyday 
lives—including connected vehicles, 
smart appliances, smart vending 
machines, smart meters, medical 
sensors, industrial controllers, and 
more. And Java's write once, run any¬ 
where technology is positioned for this 
coming wave of diverse embedded 
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SUPER VIRTUALITY 

“Because Java, by its nature, 
is a virtual machine [VM] 
environment and a virtual 
application platform, you can 

start developing and testing 
large parts of your application 

on a virtual environment— on 

the desktop, for example- 
before the embedded 
hardware is available.” 


devices—offering an underlying plat¬ 
form and infrastructure that include 
open standards, security, reliability, 
scalability, sophisticated toolsets, and 
a 9-million-plus developer community. 

java Magazine sat down with 
Terrence Barr, senior technologist and 
product manager at Oracle, to explore 
the Internet of Things, and Java's role in 
a technology transition that some are 
calling a third IT revolution. 

Java Magazine: What is the advantage 
of using java in the embedded space? 
Barr: The embedded space today is 
very fragmented. You have to piece 
together the entire stack—the run¬ 
time, the OS, the tools, the languages, 
the protocols, and the connectivity. We 
strongly believe that until we have a 
standards-based horizontal platform, 
the M2M [machine-to-machine] mar¬ 
ket won't take off, because too much 


time is spent reinventing the wheel 
and struggling with fragmentation 
rather than building solutions. 

java is a platform and a technology 
that, by design, abstracts from the 
underlying hardware and OS, and pro¬ 
vides a rich application environment, 
from very small devices to enterprise- 
class servers, java is uniquely posi¬ 
tioned to address many of these chal¬ 
lenges because, essentially, we solved 
these problems 10 or 15 years ago. We 
solved transitions from 8- to 16- to 
32-bit that the embedded space is 
facing today. We have a proven and 
secure runtime environment. We have 
infield updatability of application 
components. And java already has a 
technology ecosystem with 9 million 
developers. They might not currently 
be embedded developers, but they're 
very familiar with the programming 
language and the toolset. 


Java Magazine: So java not only facili¬ 
tates development in the embedded 
space but also acts as a catalyst toward 
embedded industry growth? 

Barr: Exactly. An Oracle technol¬ 
ogy partner recently drew a parallel 
between the current embedded space 
and the early cell phone space. The 
whole ecosystem was held back by the 
fact that there was no standard plat¬ 
form that people could build upon. 

But as soon as fairly predictable phone 
platforms became accessible, you had 
this explosion of applications, accesso¬ 
ries, hardware, and services that built 
upon the platforms. We see java in the 
embedded space playing a very similar 
role, but with even more focus on cre¬ 
ating an open, standardized technol¬ 
ogy infrastructure. 

Java Magazine: Whatarethetime- 
to-market advantages of developing 
embedded applications via desktop 
emulation? 

Barr: Because java, by its nature, is a 
virtual machine [VM] environment and 
a virtual application platform, you can 
start developing and testing large parts 
of your application on a virtual 
environment—on the desktop, for 
example—before the embedded hard¬ 
ware is available. So you can parallelize 
the embedded hardware development 
and the embedded software develop¬ 
ment, which potentially shaves many 
months off of your development cycle. 
Java Magazine: What are the issues 
regarding pushing down new logic to 
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Barr shows off an application running on a 
Keil board at Devoxx. 


embedded devices—for 
updates and delivery of 
new services? 

Barr: Suppose you have 
millions of smart meters 
in the field, runningthe 
software, collecting the 
data, and sending the data 
to the backend. But at 
some point, the utility laws 
and regulations change, 
and you need to update 
the algorithms on these 
meters. It's not plausible to 
send people into the field 
to manually update mil¬ 
lions of devices. Embedded 
hardware is getting more 
and more powerful, and at 
the same time connectiv¬ 
ity options are increasing, 
which allows for wireless 
updates. Java offers the 
ability to update in the 
field without affecting the 
integrity of the system. 
Because Java is a virtual 
environment and runs in 
a sandbox model, it helps 
guarantee the security and 
integrity of the system after 
the update. Also, overtime, you might 
deploy, say, 20 variations of hardware 
devices. Without Java, you'd have to 
update 20 types of native code. With 
Java, you write the application once, and 
you push it to multiple devices without 
concern for hardware dependency. 


A RICH FOUNDATION 

“Delivering embedded Java as a horizontal and 
integrative solution provides 80 percent of your 
underlying infrastructure.... foil get to market 

much quicker and at a lower price point.” 


Whether it's util¬ 
ity meters, automobiles, 
medical devices, or vending 
machines, all have similar 
requirements—you need 
to execute applications, 
and you need connectivity, 
security, a way to manage 
the device, a way to update 
the device, and a way for 
the device to connect back to the 
server. Delivering embedded Java as 
a horizontal and integrative solution 
provides 80 percent of your underlying 
infrastructure. You can then build 
20 percent on top of it, adding your 
particular industry value. You get to 
market much quicker and at a lower 
price point. 

Java Magazine: Whatarethe devel¬ 
opment advantages of working with 
embedded Java? 

Barr: As I mentioned earlier, with tradi¬ 
tional native embedded development, 
you have to pick and choose the vari¬ 
ous components, integrate them your¬ 
self, and deal with a range of tools and 
methodologies. By comparison, the 
Java runtime is a complete develop¬ 
ment stack that is tested, is based on 
standards, and uses standardized APIs 
that you're already familiar with. So 
it's very easy to get started and write 
application and business logic. The 
new Oracle Java ME Embedded 3.2 not 
only offers a variety of standard APIs— 
things like XML processing, location- 
based services, and file access. We've 


also added APIs that are specific to the 
embedded space, that allow you to 
deliver a solution even more quickly. 
You're able to remotely provision and 
start and stop applications. You have 
a logging API that allows you to log 
locally as well as remotely, for remote¬ 
monitoring purposes. And you also 
have the AccessPoint A PI, which allows 
the application to intelligently switch 
between multiple communications 
channels depending on data rates and 
bandwidth requirements. 

And finally, you can use your same 
familiar development tools, such as 
NetBeans and Eclipse. And you can do 
live, on-device source-level debug¬ 
ging using these IDEs. For most Java 
developers, that's nothing new. But for 
native embedded developers, this is 
heaven. For them, debugging and test¬ 
ing is typically a very painful process. 
Java Magazine: What specific hardware 
would you recommend for develop¬ 
ers who want to get their feet wet with 
embedded Java? 

Barr: If you have experience in the 
embedded space, you know that there 
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PORT YOUR EXPERTISE 

“One of the big values of having Java in the embedded 
space is the ability to bring the expertise, the tools, and 
the code from one platform to another— the inherent 
ability to apply your expertise across this whole range of 
devices, from very small to very large.” 


are any number of permutations of pro¬ 
cessors, I/O, board designs, interfaces, 
and peripherals—it's much more frag¬ 
mented than the desktop space. So we 
had to pick a specific set of hardware 
to start with, where we could enable 
developers to get a system up and 
running, to experiment with some of 
the features that we support. So what 
we chose is the Keil MCBSTM32F200 
(ARM Cortex-M3)—a ready-to-run 
evaluation platform. You can buy it 
online, and once you have it in your 
hands, you'll soon be able to down¬ 
load the Oracle Java ME Embedded 3.2 
runtime binary. That will come with 
instructions, and you'll flash the run¬ 
time onto the board, hit the reset but¬ 
ton, and you'll have a complete, ready- 
to-run Java runtime environment. 

You'll hook upyourlDE—NetBeansor 
Eclipse—and you'll be ready to write 
embedded Java applications. In the 
meantime, we offer a Windows-based 
device emulation environment. 

The Keil board is mainly forevaluation 
purposes. If you want a deployment- 


ready device, we can point you to 
our partners, such as Cinterion and 
QuaJcomm. They will be making avail¬ 
able various types of integrated, wire¬ 
less module devices and platforms 
that come with the Oracle Java ME 
Embedded 3.2 runtime. The devices 
have an integrated cellular modem, 
they have RAM and ROM on the 
module—they're basically very power¬ 
ful small wireless computers. So you 
can also use these to get started with 
embedded development and foryour 
actual device deployments. 

Java Magazine: Th e ti m e I i n e fo r 
Oracle's embedded offerings details 
a 2014 JVM [Java Virtual Machine] 
convergence for Oracle Java SE 
Embedded 8 and Oracle Java ME 
Embedded 8. What will this mean for 
embedded developers and partners? 
Barr: One of the big values of hav¬ 
ing Java in the embedded space is the 
ability to bring the expertise, the tools, 
and the code from one platform to 
another—the inherent ability to apply 
your expertise across this whole range 
of devices, from very small to very large. 
So about 12 to 18 months ago, Oracle 
embarked on a plan to converge and 
make more aligned the two relevant 
Java platforms, Java SE and Java ME. 

Historically, Java ME was somewhat 
the smaller sibling of Java SE. But it 
had different features and APIs, which 
made it difficult to take your code and 
expertise and switch platforms. This 
strategy of aligning the two platforms 


will make that process much easier— 
with similar language features, simi¬ 
lar API features, and similar runtime 
features. To that effect, Oracle filed 
two newJSRs, JSR 360 and JSR 361, 
in October 2012. In 2013 and 2014, 
we will continue to execute on this 
strategy to reshape the Java platform 
and the Java products. The goal is 
that eventually developers see Java as 
one continuum, from the very small 
device up to the very large systems. 

So you can apply your same skills, 
tools, and code across this continuum. 




Barr talks about embedded while 
onsite at Devoxx. 




Barr talks with Stephen Chin about 
embedded Java and demos a smart 
solar tracking system. 
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You'll choose the runtime based on 
your device properties, but from a 
developer perspective it will look very 
smooth and homogeneous. 

Java Magazine: For those outside the 
embedded world, a java ME configu¬ 
ration provides the basic set of librar¬ 
ies and VM capabilities for a range of 
devices, while a java ME profile adds a 
set of APIs that enable a more specific 
range of use cases. How will the java 
SE and java ME convergence affect 
the current CDC [Connected Device 
Configuration] and CLDC [Connected 
Limited Device Configuration]? 

Barr: The CDC traditionally occupies 
the midrange embedded space and 
has been very successful in vertical 
product spaces—for example, every 
Blu-ray player ships with a CDC run¬ 
time. But we want to map the entire 
embedded space. So CDC will basically 
become a configuration of Oracle java 
SE Embedded, and Oracle java ME 
Embedded will cover everything else. 
As a developer, you'll basically look at 
your problem domain and your device 
requirements, and you'll just say, 

"OK, does it fit a java ME Embedded 

environment, or 
do I need java SE 
Embedded?" The 
two platforms will 
be aligned, so from 
a development 
perspective the 
experience will be 
very similar. 


LOCAL INTELLIGENCE 

“What you want to do is 

use the intelligence of the 
local device to program-in 
business logic.” 


Oracle Java SE Embedded is 

based on Java SE but optimized for 
midrange to high-end embedded 
systems—devices having 32 MB or 
more of RAM (without graphics). 

Oracle Java ME Embedded Client is based on the Java 
ME Connected Device Configuration (CDC), a subset 
of the Java SE platform optimized for low-to-midrange 
embedded systems—devices having 8 MB or more of 
RAM (without graphics). 

Oracle Java ME Embedded 3.2 is an optimized runtime 
stack based on the Java ME Connected Limited Device 
Configuration (CLDC), intended for small, headless (no 
graphics/UI) embedded devices having 130 KB or more 
of RAM. 

Oracle Java Embedded Suite 7.0 provides an 
enterprise-like suite of technologies for the Oracle Java 
SE Embedded 7 runtime—Java DB relational database; 
GlassFish Servlet-based application server; and Oracle’s 
Jersey implementation of JSR 311, the Java API for 
RESTful Web Services (JAX-RS). 



Oracle’s 

Embedded 

Products 


Java Magazine: It's dif¬ 
ficult to overestimate 
the likely billions of con¬ 
nected smart devices in 
this era of the Internet of 
Things. At the back end, 
this will bring about a 
data explosion. How is 
Oracle positioning itself 
for this data tidal wave 
on the enterprise? 

Barr: It's clear that these 
devices will be generat¬ 
ing huge amounts of 
data—after all, the data 
is where their value is. 

If this anticipated data 
wave is left unchecked, 
it could overwhelm the 
internet infrastructure. 

Many cellular networks 
today already might be 
overwhelmed in han¬ 
dling the data from 
smartphones, so how 
are we going to handle 
data from billions of 
additional connected 
devices? 

What you need to do is to turn large 
amounts of data into small amounts 
of valuable information. If you have a 
sensor that's monitoring the tempera¬ 
ture in a truck, you don't want that 
device to just blindly send a tempera¬ 
ture reading to a back-end server every 
second. That's not useful information, 
and it generates enormous quantities 


of data (and associated costs) if done 
on a large scale. And then on the back 
end, what do you do with that data? It 
has almost no value. 

What you want to do is use the 
intelligence of the local device to 
program-in business logic. If you're 
transporting a certain type of product 
that has specific temperature require- 
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merits, you need to send an alert only 
if the temperature falls outside of that 
range. The embedded device processes 
the data locally, and the back end sees 
a vastly reduced level of transmitted 
data, in the form of actual useful infor¬ 
mation such as alerts. 

But you're not just connecting those 
billions of embedded devices directly 
to the back end, because both the flow 
of data and the manage¬ 
ment of these devices 
would be difficult to 
handle. What you typi¬ 
cally need is a concentra¬ 
tor tier and device, which 
sits between the edge 
client and the back end. 

The concentrator takes 
the data stream from 
these devices and filters 
it, extracting in real time 
the business-critical 
information (called com¬ 
plex event processing ), 
and then sends it on to 
the enterprise at the 
back end. The concentra¬ 
tor can also act as a proxy to manage 
devices on behalf of the back-end tier. 

java brings great value to all of these 
processing tiers. Depending on the 
given solution, you can choose where 
and howto implement filtering and 
business logic. And with Java, it's 
always the same language, the same 
programming model, and the same 
tools and expertise. That's a huge 


value over having different languages 
and different programming methodol¬ 
ogies spread out across your solution. 
Java Magazine: How does big data 
coming from embedded devices affect 
database product solutions? 

Barr: NoSQL databases are frequently 
being used on these back-end sys¬ 
tems, because they're more flexible 
in dealing with this kind of heteroge¬ 
neous device data. But, 
in many cases, you also 
want to mesh together 
relational and nonrela¬ 
tional data. You could 
take temperature sen¬ 
sor data and location 
data from your devices, 
for example, and mesh 
that on the backend 
with mapping data to 
create more-valuable 
information. 

Java Magazine: This year 
at JavaOne 2012, Oracle 
presented an entire sub¬ 
conference called Java 
Embedded @ JavaOne. 
What was the takeaway experience 
from the conference? 

Barr: Oracle is dead serious about 
the M2M space and embedded Java. 
Oracle recognizes that this is a huge 
opportunity—for Oracle, for Oracle's 
partners, and for the entire Java 
ecosystem. 

During the conference, I spoke to a 
lot of partners and developers, and the 


reaction was uniformly positive. They 
said, "We get it. This makes sense to 
us, why Java should be in the embed¬ 
ded space." Now we're busy fielding all 
sorts of requests from developers and 
potential partners who want to open 
up a dialogue and understand where 
we're going, how they can add value, 
and how they can participate. People 
are excited about the possibilities out 
there. For developers, I believe this is a 
huge opportunity. For Java, the best is 
yet to come. </articie> 


Steve Meloan is a former C/UNIX soft¬ 
ware developer who has covered the Web 
and the internet for such publications as 
Wired, Rolling Stone, Ployboy, SF Weekly, 
and the Son Froncisco Examiner. He re¬ 
cently published a science-adventure 
novel, The Shroud, and regularly contrib¬ 
utes to The Huffington Post. 

F LEARN MORE 

• Java Embedded 

• lava Embedded downloads 

• Oracle lava ME Embedded 3.2 FAQ 

• Terrence Barr's blog 


BIG DATA CHALLENGE 

“Many cellular networks 
today already might 
be overwhelmed in 
handling the data from 
smartphones, so how 
are we going to handle 
data from billions of 
additional connected 
devices?” 
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TOP TEN 
REASONS 

FOR USING 
JAVA IN 
EMBEDDED 

APPS 

Learn why Java is the best language 
for the Internet of Things. 

BY SIMON RITTER 


For many years now, 
we've been promised the 
Internet of Things—with 
everything from light- 
bulbs to cars all networked 
together with built-in 
"intelligence." The com¬ 
bination of Moore's Law 
and economies of scale is 
finally makingthis a real¬ 
ity. For example, Philips 
recently announced that it 
would be selling internet- 
enabled lightbulbs through 
the Apple store. Forthese 
networked, programmable 
devices to be really useful, 
they need applications to 
collect, process, and trans¬ 
mit data. Traditionally, 
code for embedded sys¬ 
tems has been written 
in assembler or C, but 
for the rapid explosion 
of programmable, con¬ 
nected devices, we need 
something better: Java. 
What makes Java the best 
language for embedded 
devices? Flere are ten great 
reasons (with thanks to 
Roger Brinkley's blog entry 

for inspiration): 
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1 WE ALREADY HAVE A WHEEL; LET’S 
NOT KEEP INVENTING NEW ONES. 


Java SE 7 has almost 4,000 standard 
class libraries covering everything 
from collections through concurrency 
to networking. Having this enormous 
collection of standard APIs means 
significantly less time spent rewriting 
standard functionality for embedded 
applications. While smaller-footprint 
parts of the Java platform, such as 
Oraclejava ME Embedded, don't have 
as many standard classes by default, 
they still have a wealth of functional¬ 
ity available. Many of the Oracle Java 
ME Embedded APIs are targeted at 
the needs of embedded systems: 
for example, the device API provides 
standardized ways of working with 
low-level protocols such as Serial 

Peripheral Interface 
(SPI) and Inter- 
Integrated Circuit 
(I2C). However, 

Java's API power 
doesn't stop with 
the classes available 
as part of the plat¬ 
form. Because Java 
is such a popular 
language, develop¬ 
ers have created 
libraries that address 
almost anythingyou 
can think of: sensors, 
serial port commu- 


ONE FOR ALL 

Porting code in Java 
is a non-event. As 

long as none of the 
APIs used by the 
application have 
changed, it’s simply a 
matter of redeploying 
the existing class or 
JAR files. 
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nication, and a ZigBee API, to name a 
few. Many of these libraries are open 
sourced and can easily be integrated 
into new embedded applications. 

“SEGMENTATION FAULT” IS NEVER 
GOOD, SO WE’LL JUST AVOID IT. 

One of Java's strengths, and one of the 
things that has made it so popular as a 
programming language, is how robust 
application code is. Languages such 
as C and C++ use explicit pointers to 
reference memory. In Java, all object 
references are implicit pointers that 
cannot be manipulated by application 
code. This avoids potential problems, 
such as buffer overruns and memory 
access violations, through incorrect 
pointer calculations. Situations such as 
these can cause an application to stop 
abruptly. In embedded systems, these 
types of errors can be much harderto 
track down because often there is no 
device such as a screen where error 
messages can be displayed. 

3 ONE PLATFORM RUNS 
THEM ALL. 

Unlike desktop machines or even serv¬ 
ers, embedded systems vary widely in 
terms of their architecture, resources, 
and OS capabilities. When embed¬ 
ded systems are updated, there's 
also a good chance that the proces¬ 


sor and OS will change significantly 
from the previous release of the prod¬ 
uct. Migrating applications written in 
assembler or C to a new platform can 
be time consuming, costly, and error 
prone. From the very beginning, Java 
has been write once, run anywhere. 
Porting code in Java is a non-event. As 
long as none of the APIs used by the 
application have changed, it's simply 
a matter of redeploying the existing 
class or Java archive (JAR) files. When 
moving to a newer (and therefore 
better-performing) version of Java, all 
that is required is a simple recompile. 

4 LET THE VIRTUAL MACHINE TAKE 
CARE OF THE MUNDANE STUFF. 

Thejava Virtual Machine (JVM) pro¬ 
vides a wealth of benefits to embedded 
developers that they don't get with 
natively compiled code. 

Memory management is all handled 
automatically by the JVM; memory is 
allocated by instantiating an object, 
rather than having to use explicit calls 
to library functions such as malloc. 
Developers don't have to keep track of 
object references and explicitly de¬ 
allocate memory either; the garbage 
collector handles all this. This substan¬ 
tially reduces the potential for memory 
leaks, which can have a far greater 
impact on embedded systems where 
applications might need to run for very 
long periods in memory-constrained 


































envi ronments without 
needing to be restarted. 

Concurrency support for 
applications is also han¬ 
dled by the JVM. The abil¬ 
ity to create and synchro¬ 
nize different threads of 
execution has been built 
in from the very begin¬ 
ning with Java. Even if the 
embedded platform on 
which the JVM is deployed 
does not support multi¬ 
threading directly (some¬ 
thing that's increasingly rare these 
days), it's still possible to emulate the 
functionality through the concept of 
green threads. 

Some people wrongly think that by 
using a virtual machine (VM) rather 
than native instructions, performance 
will be compromised. With nearly 20 
years of developmentin the JVM, these 
issues are no longer a significant fac¬ 
tor. In certain situations, having pre¬ 
cise knowledge, which is available only 
as the application is running, can lead 
to better performance than the perfor¬ 
mance of natively compiled code. 


pH level of part of an industrial pro¬ 
cess. As such, each system will have 
hardware tailored to the solution being 
developed, which gives designers far 
greater choice than when creating a 
new desktop or laptop system. 

Many embedded chip manufactur¬ 
ers, such as Freescale and Broadcom, 
create processors and systems on a 
chip (SoCs) using architectures from 
companies such as ARM. Although this 
makes certain aspects of the different 
processors and SoCs standard, there 
are often small differences in terms of 
aspects such as floating-point process¬ 
ing, bus architectures, and so on. Java 
abstracts these differences away from 
the developers, making their lives sig¬ 
nificantly easier. 

Reference implementations of the 
Oracle Java Embedded Client are avail- 
able for Intel x86 and MIPS as well as 
ARM v5, v6, and v7 architectures run¬ 
ning Linux (the most popular OS for 
embedded devices). Oracle Java SE 
Embedded is available for Intel x86 
and IBM Power e500v2 and e600 
systems as well as ARM v5, v6, and v7 
architectures, again running Linux. 
This gives embedded systems design¬ 
ers plenty of choice about which plat¬ 
form to use. 


5 PICK AN EMBEDDED PLATFORM- 
ANY EMBEDDED PLATFORM. 


DON’T GO NATIVE 

Some people 

wrong y think that 
by using a VM 
rather than native 
instructions, 
aerformance will 
oe compromised. 


Embedded systems are generally 
designed to solve a specific problem, 
whether it is how to provide in-car 
entertainment or howto monitor the 


6 THINGS HAVE CHANGED 
SINCE 1995. 


Java was originally developed in the 
early 1990s to allow applications to be 
written for the Star7 PDA, which was an 
embedded device. When Java was first 
launched as a general-purpose comput¬ 
ing platform in 1995, the average per¬ 
sonal computer had 8 MB of RAM and 
a processor running at less than 200 
MHz. Even today, the full Java SE run¬ 
time requires only a minimum of 64 MB 
of RAM to ru n on Windows XP. TypicaI 
low-end embedded systems now match 
or exceed these specifications. 

Java was developed from the very 
beginning to work in resource- 
constrained environments, making it 
ideally suited to the needs of embed¬ 
ded systems today. Oracle Java ME 
Embedded will run in as little as 350 
KB of ROM and 130 KB of RAM (look 
carefully, that's kilobytes, not mega¬ 
bytes), growing to 1.5 MB of ROM 
with 700 KB of RAM for the full, stan¬ 
dard configuration. Oracle Java SE 
Embedded is designed for more- 
powerful systems, but still requires 
only 39 MB of ROM and 32 MB of RAM. 

Having to deal with lower clock 
speeds also means thatthejava plat¬ 
form works well when you want to 
maximize the time between charges 
for battery-powered devices. When 
resources are tight, Java can still get 
the job done. 
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Java Embedded: Start Developing 

Tori Wieldt, Java Magazine technology editor, caught up 
with Kevin Smith of Oracle Technical Business 
Development and got the latest on Oracle Java ME 
Embedded. 

Java Magazine: What’s new for partners in the Java ME 
embedded space? 

Smith: We announced Oracle Java ME Embedded at 
JavaOne San Francisco 2012. It’s pretty exciting because 
it represents a new Java platform that addresses the 
needs of the machine-to-machine [M2M] market and 
the Internet of Things. We have been working closely 
with Cinterion and Qualcomm on this. Oracle Java ME 
Embedded contains JSR 228, Information Module 
Profile—Next Generation. The Java ME team has been 
working for many years connecting people to the internet 
with PCs, wireless handsets, tablets, and laptops, and 
Oracle Java ME Embedded represents the platform that 
will connect things to the internet. Depending on which 
analyst report you read, by 2020 there will be 30 to 60 
billion things connected. Now, you can use your existing 
Java skills to program for these many devices. 

Java Magazine: What is the Qualcomm Orion board? 
Smith: The Orion board is Qualcomm’s developer board 
for M2M and the Internet of Things. Since the inception 
of Qualcomm’s new M2M business unit in early 2012, we 
have been working with Qualcomm on Oracle Java ME 
Embedded support for Orion. 

Java Magazine: Why does this matter to a Java 
developer? 

Smith: Unlike most developer boards, Orion is different in 
that the system on a chip [SoC] is attached to the board 
via a daughter card. Qualcomm has many different SoC 



combinations with different capabilities and modems 
that will provide developers one board that spans many 
different device types. Included on the motherboard are 
WiFi a/b/g/n, an SD card slot, four DB9 connectors, five 
LEDs, JTAG, USIM, GPIO, SPI, and I2C. The board even 
runs on the included battery. It also comes with sensors 
for temperature and light; GPS; and a 3-D accelerometer, 
so developers will be able to prototype solutions for con¬ 
tainer management, building automation, automotive, 
and the next wave of cool devices on the board. We also 
have a Java ME Software Development Kit integrated 
with the NetESeans IDE that emulates the features of the 
board. We really think that this is going to accelerate time 
to market for developers because they can get their hands 
on the platforms as soon as they are available, rather 
than waiting for OEM [original equipment manufacturer] 
prototypes. It’s very exciting. Additional good news for 
developers: these prototype boards usually cost around 
$5,000 for a single solution, and with the Orion board 
they can get a scalable platform for around $500. 



Kevin Smith of Oracle Technical Business 
Development explains what’s new for partners 
and Java developers in the embedded space. 




“GIVE US THE TOOLS, AND 
WE WILL FINISH THE JOB.”* 


Developing code requires tools; the 
betterthe tools, the easierthe job is 
to finish and the more quickly it gets 
done. Today, time to market is just as 
critical as functionality for a product's 
success. 

Tools for writing assembler and 
C code for embedded systems tend 
toward text editors and command¬ 
line tool chains controlled by esoteric 
tools such as Make. These work, but 
they severely limit the productivity 
of developers. Java developers have 
a great deal of choice of commercial 
as well as free and open source inte¬ 
grated development environments 
(IDEs). Tools such as NetBeans and 
Eclipse make writing code much easier 
and less error prone. Features such as 
automatic code completion, syntax 
checking as you type, and integrated 
documentation all help to get the job 
done more quickly and make the code 
more robust. As rich client platforms 
(RCPs), these tools are easy to extend, 
so they can be tailored to the needs 
of specific types of application devel¬ 
opment. Development time can be 
greatly reduced by building emulators 
for the target hardware to work with a 
desktop-based IDE. 


* WINSTON CHURCHILL, BBC RADIO BROADCAST, FEBRUARY 9,1941 
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8 DEVELOP ON ONE MACHINE, 

DEPLOY TO ANOTHER. 


Embedded systems by their very 
nature tend not to resemble desktop 
or laptop systems. Frequently they are 
what is called headless , meaning that 
they have no display attached. This 
adds extra challenges and complex¬ 
ity to software development in terms 
of how to compile the code on one 
machine and deploy it to another. 

Because Java uses a VM, it doesn't 
matter where you compile your code, 
so there's no need to set up complex 
cross-compilation tool chains. Use 
your favorite Java IDE to develop the 
code in comfort on your desktop, and 
then simply copy the class files or JAR 
files to the target device. To make 
developers' lives even easier, most 
IDEs support the concept of remote 
debugging through a network connec¬ 
tion. If the code is doing what you told 
it to do, rather than what you wanted it 
to do, simply use the debugging facili¬ 
ties in your IDE to figure out what the 
issues are. This will be a lot faster than 
using print statements. 


9 NINE MILLION DEVELOPERS 
CANT BE WRONG. 


Depending on whose survey you con¬ 
sult, there are up to 9 million devel¬ 
opers in the world who know howto 
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program in Java. Almost 
all universities use Java as 
a teaching language for 
object-oriented program¬ 
ming fundamentals, which 
meansthatthe numberof 
Java developers is likely to 
increase. 

If you want to develop 
Java code, you have a huge 
pool of programming tal¬ 
ent to draw on. Because the 
JVM and the class librar¬ 
ies abstract away much of 
the complexity of devel¬ 
oping embedded system 
code, you don't need to 
find people who have 
lots of experience in this 
field. For situations where 
more-domain-specific knowledge 
is required, there will still be a larger 
number of Java-capable developers to 
fill these positions. 

"I FROM DEVICE 

WJ TO DATA CENTER ... 

For embedded systems to have real 
value, they need to be networked, 
not just to other embedded systems 
but also to places where data can be 
aggregated, analyzed, and searched. 
This is what data centers are good 
at, recording and processing huge 
amounts of data from many different 
sources and then mining the data for 


useful information. What is 
the most popular platform 
for developing enterprise 
applications? Java. Using 
Java in embedded devices, 
in the data center for big 
data processing, and on the 
desktop for presenting and 
controlling the whole sys¬ 
tem makes architecting a 
complete solution simpler, 
quicker, and cheaper. 

As you can see, Java 
offers benefits for devel¬ 
oping code for embedded 
systems. With lower cost, 
more choices of platform, 
and readily available 
skilled developers, there's 
nothing holdingyou back 
from helping to build the Internet of 
Things. </article> 


Simon Ritter is a Java technology evan¬ 
gelist at Oracle. He has worked in both 
Java technology development and consul¬ 
tancy. He now focuses on the core Java 
platform and Java for client applications. 


BIG TALENT POOL 

Because the JVM 
and the class 

libraries abstract 
away much of 
the complexity 
of developing 
embedded system 
code, you don’t 
need to find people 
who have lots of 
experience. 
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JAVA ARRIVES 

ON A $25 BOARD 

Eben Upton and the Raspberry Pi 
) Foundation endeavor to inspire a new 

generation of programmers. 

BY DAVID BAUM AND ED BAUM 



Y ou've heard the phrase before: 
"This thing is going to change 
the world." People said it about 
the electric lightbulb, the telephone, 
and the internal combustion engine. 
And they were right. But what does 
it take to change the world today? 
Can a single idea or innovation still 
do that? For Eben Upton, cofounder 
of the UK-based Raspberry Pi 
Foundation, the answers to those 
questions are linked to the way he 
hopes to measure the success of 
his project: by adding to the critical 
mass of students interested in com¬ 
puter science. 


ART BY NICHOLAS PAVKOVIC, PHOTOGRAPHY BY JOHN BLYTHE 





































The Raspberry Pi fills the 
niche need for low-cost 
programmable computers, 
says Raspberry Pi 
Foundation Cofounder 
Eben Upton. 


SNAPSHOT 

RASPBERRY PI 
FOUNDATION 

raspberrvpi.org 

Headquarters: 

Caldecote, 

Cambridgeshire, 

England 

Industry: 

High technology 

Employees: 

3 

Java technology 
used: 

A special version 
of Java Virtual 
Machine adapted 
for the Raspberry Pi 
computer 


The heart of the project is the 
Raspberry Pi, a tiny yet powerful 
general-purpose computer priced at 
USS25. The device is about the size 

i 

of a deck of playing cards and can 
deliver l,080p Blu-ray-quality graph¬ 
ics via its HDMI port. It runs Linux 
kernel-based operating systems. 

Oracle is in the process of port - 
ingthejava Virtual Machine (JVM) 
to run on the Raspberry Pi's ARMv6 
700 MHz processor, expanding the 
potential usesforthe minicomputer 
and making it easierthan everfor 
people to create lightweight, power¬ 
ful, and reliable programs. 

"Java is kind of the missing piece 
for us," Upton says. "Licensing agree¬ 
ments are underway that will enable 
us to bundle Java on the Raspberry Pi. 
When we have that, then we can 


claim that we have a full suite of 
mainstream development tools 
bundled on the device." 

WHERE HAVE ALL THE 
CODERS GONE? 

With processing power sufficient to 
drive a high-definition media cen¬ 
ter at the price of a couple of movie 
tickets, it's not surprising that the 
Raspberry Pi is on track to ship its 
millionth unit by the end of itsfirst 
yearin production. But Upton and his 
colleaguesconsiderthe numberof 
units sold to be a crude measure of 
impact. Forthem, success is gauged 
on a philanthropic scale. 

"How are we going to find tomor¬ 
row's computer programmers?" 
Upton asks, and with good rea¬ 
son. As director of studies in com¬ 


puter sciences at St. John's College, 
Ca mb ridge, he has personally wit¬ 
nessed a steady decline in the num¬ 
ber of applicants for computer sci¬ 
ences, not to mention a regression in 
the complexity of the programming 
tasks those applicants can under¬ 
take. He says the same trend can be 
seen at almost any computer com¬ 
pany, where there are more engineers 
in their30sthan in their20s and 
experienced programmers are often 
hired away from other companies 
because there aren't enough people 
entering the field out of college. 

"One of the main reasons for the 
deterioration in computer skills in 
the upcoming generation is attribut¬ 
able to a simple fact: low-cost pro¬ 
grammable computers that were 
available when I wasyoung aren't 
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A CROSSOVER BOARD 

This intriguing little device with its impulse-buy price tag is 
also gaining momentum among adult hobbyists, tinkerers, 
and developers. And it’s raising eyebrows in industrial sectors, 
as managers begin to perceive its potential as a low-cost 
alternative to domain-specific devices. 



around anymore," Upton explains. 

"We wanted to build a piece of hard¬ 
ware to fill that niche. The Raspberry Pi 
is cheap enough so that every student 
can have one. Some of them will be 
captivated by it. With Java on it, we'll 
be able to provide an environment 
that is friendly enough to enable a very 
young child to start programming with 
a language that professional software 
engineers use." 

"Java lets students learn how to 
program without getting bogged down 
by the complexities of C++ and other 
languages," Upton adds. "Java tells you 
when you have done something wrong 
in your coding. And it is a professional 
programming tool. It's a nice addition 
to the Raspberry Pi." 

SHAPING THE FUTURE ONE CHILD 
AT A TIME 

The Raspberry Pi was developed pri¬ 
marily as an affordable education tool 
to inspire the next generation of com¬ 
puter programmers. Not surprisingly, 


the intriguing little 
device with its impulse- 
buy price tag is also 
gaining momentum 
among adult hobbyists, 
tinkerers, and devel¬ 
opers. And it's raising 
eyebrows in industrial 
sectors, as managers 
begin to perceive its 
potential as a low-cost 
alternative to domain-specific devices. 

But Upton keeps bringing the 
focus back to "units of one" and the 
long-term impact of getting these 
tantalizing devices into homes and 
schools where children are inspired to 
play with them, limited only by their 
imaginations. In that way he hopes 
to begin, through his foundation, to 
refill a pipeline of talent that he says 
society stopped filling in the late 1990s 
when programmable home comput¬ 
ers such as the Commodore 64 and the 
BBC Micro were replaced by closed- 
platform gaming consoles and PCs 
and Macs with GUIs that don't expose 
users to a programming language or a 
command screen. 

"We'll consider the project a success 
if we eventually see more kids apply¬ 
ing for college in computer sciences," 
Upton says. "My hope is that we can 
add 1,000 computer science students 
peryearin the UK. That would trans¬ 
form the industry and the lives of those 
students." Upton would like to see 


people begin to learn programming as 
early as age 8, apply to universities at 
18, move into industry at 21, and start 
their own companies at 30. It's a long- 
range vision. Sometimes that's what it 
takes to change the world. 

AN ENGAGING ENVIRONMENT 
FOR STUDENTS 

The Raspberry Pi ships without a case, 
which naturally invites scrutiny and 
arouses curiosity. Unlike the slick, 
sealed units that dominate the world 
of personal computing, students can 
see the circuit board and compo¬ 
nents and learn to identify their vari¬ 
ous functions. The Raspberry Pi has 
a Broadcom BCM2835 system chip 
(which contains an ARMv6 700 MHz 
processor and a VideoCore IV GPU), 
512 MB of RAM, an HDMI port, video 
and audio outputs, a USB port, com¬ 
posite video out, and an SD card slot 
for operating systems and applica¬ 
tions. A USS35 model includes a sec- 

i 

ond USB port and an Ethernet port for 
networking. The Raspberry Pi does not 
currently include wireless networking, 
but users are successfully connecting 
USB Wi-Fi adapters (dongles). 

The major hurdle during the early 
days of the project was finding com¬ 
ponents that could deliverthe req¬ 
uisite performance without boosting 
the price beyond the reach of many 
students. The breakthrough in deliver¬ 
ing high-quality graphics came from 
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Get Started with 
Raspberry Pi 


If you are ready to dive into 
programming on the 
Raspberry Pi, don’t miss 
the article “Get Started 
with Java SE for Embedded Devices on Raspberry Pi,” in 

the November/December 2012 issue of Java Magazine. 
Authors Bill Courington and Gary Collins provide an 
in-depth, step-by-step guide to getting Linux and 
Oracle Java SE Embedded running on your Raspberry Pi 
in less than an hour. 



Broadcom Corporation, where Upton 
is employed as an SoC (system-on- 
a-chip) architect. In 2010, he was 
involved in the design and develop¬ 
ment of the Broadcom BCM2835 
multimedia applications processor. 

"Having decent graphics perfor¬ 
mance and multimedia features can 
attract children to the platform," 
Upton says. "Gaming and Blu-ray- 
quality movie playback are hooks to 
draw young users to the device." 

FINDING THE SWEET SPOT 

While 512 MB of RAM may seem pro¬ 
hibitively small for a programming 
environment, Java actually fits well 
within those confines. "Java is a 
language that is ideal for creating 
small applications that run very por- 
tably," says Simon Ritter, technology 
evangelist at Oracle. "The Java devel- 
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opment community is accustomed to 
these kinds of limitations. When Java 
was created back in the 1990s, most 
desktops had only 4 or 8 megabytes 
of memory." 

Optimizingjava forthetiny com¬ 
puter's ARMv6 processor requires 
some finesse. The challenge is related 
to floating-point arithmetic—the way 
the processor performs arithmetic on 
real, or nondecimal, numbers. Many 
chips based on the ARMv6 architecture 
lack hardware floating-point units; the 
Broadcom BCM2835, however, does 
include ARM's virtual floating point 
(VFP) coprocessor. 

A port of the JVM that uses soft 
floating point on ARM processors is 
currently available; it will work on 
the Raspberry Pi and is supported by 
Oracle. Oracle is creating a different 


version oftheJVM that will run on the 
Raspberry Pi's processor and will take 
advantage of the acceleration for hard 
floating-point arithmetic. That should 
yield a 10 to 15 percent improvement 
in performance for more-compute- 
intensive applications such as those 
that use graphics. "We're in a compre¬ 
hensive testing cycle for the optimized 
version of JVM for the Raspberry Pi," 
Ritter says. "That should deliver a lot of 
benefits for users." 

What else does Java bring to this 
tiny computer? For Upton, it all comes 
back to educating children, the objec¬ 
tive at the heart of the Raspberry Pi 
Foundation. "There are some high- 
quality educational applications that 
run on Java that we can bring across 
with no investment," he says. "That's 
very important to us." 



Simon Ritter demonstrates mind control of a Lego windmill using 
only his brain (and a Raspberry Pi running Java). 
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Ritter concurs that the sweet spot 
for the Raspberry Pi is in education 
and that Java is well positioned to 
support that. "For students and hob¬ 
byists, Java provides better reliability 
and easier debuggingthan many of 
the other development languages that 
have been ported to the Raspberry Pi," 
he adds. "And there are many exist¬ 
ing libraries of frameworks for Java 
that can be used in conjunction with 
the device. It has great potential to 
provide schools with a very low-cost 
platform that children can experi¬ 
ment with." 

Of course, ultimately these students 
will move into the business world, 
and some of them will use their skills 



Oracle is in the process of porting the JVM to run on the 
Raspberry Pi’s ARMv6 700 MHz processor. 
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to adapt this low-cost 
computing platform for 
commercial purposes. 

Java's mature ecosystem 
will facilitate that pro¬ 
cess. "GlassFish Server 
Open Source Edition 
could be put onto the 
Raspberry Pi so it could 
serve Web pages or run 
Java enterprise applica¬ 
tions," Ritter says, citing 
one example of a com¬ 
mercially viable Java com¬ 
panion. "GlassFish has 
been designed very care¬ 
fully using a microkernel, so it does 
not require a lot of memory in its most 
basic form. It only uses the parts it 
needs to run the application. It is well 
suited to this kind of device." 

Upton also recognizes that his 
invention will soon expand beyond the 
classroom. "We're going to create a lot 
ofvaluefor people developing indus¬ 
trial applications," he says, pointing 
out that a small, affordable general- 
purpose computer could ultimately 
replace a wide range of specialized 
devices, especially those that require 
embedded microprocessors to perform 
essential tasks on the shop floor, on 
an assembly line, and for finely tuned 
scientific applications. 

Yet wherever this useful device may 
end up, fostering creativity remains 
the driving force behind the Raspberry 


Pi Foundation. Java is 
expected to play an 
important role in that pro¬ 
cess, whether in schools, 
in industry, orin the hands 
of the do-it-yourself 
community. 

"Once hardware is 
a given, people will be 
able to innovate at the 
software level," Upton 
concludes. "We are 
very hopeful that the 
Raspberry Pi and its edu¬ 
cational initiatives will 
refill the pipeline of tal¬ 
ented individuals who will shape the 
future for all of US." </article> 


Based in Santa Barbara, California, David 
Baum and Ed Baum write about innova¬ 
tive businesses, emerging technologies, 
and compelling lifestyles. 


LOOKING AHEAD 

Future enhancements 
may include Wi-Fi 
plug-and-play with 
firmware revisions, 
an onboard Skype 
service, and add-on 
expansion boards for 
cameras. 


O 

o 





f 




java 

.net 


blog 



35 































(embedded ) 


THE FUTURE 

OF MONEY 



With its MintChip offering, the Royal 
Canadian Mint plays the Java Card 
platform in the emerging world of 
digital currency. 

BY PHILIP]. GILL 

M inting coins is an activity as old as the 
earliest human civilizations. From the 
precious stones and metals that mil¬ 
lennia ago replaced the barter of cattle, sheep, 
and grain, what serves as money has continued 
to evolve. Today the future of money appears to 
be the many forms of digital currency—money 
or scrip that is only exchanged electronically 
over private and public computer networks, 
including the internet. 

Forthe Royal Canadian Mint (RCM), the sole 
legal producer of all circulation coins in Canada, 
the transition to digital currency represents 
a major opportunity. "We consider ourselves 
to be quite innovative at the Royal Canadian 
Mint," says Marc Brule, chief financial officer at 
the RCM, which is headquartered in Ottawa, the 
nation's capital. 


Royal Canadian Mint CFO Marc Brule (left) 
and Dr. David Everett 

ART BY NICHOLAS PAVKOVIC, PHOTOGRAPHY BY PATRICK FORDHAM 
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far have: "The MintChip is the only 
digital currency in the world being 
researched by a sovereign govern¬ 
ment," says Kowal. Given that the 
Canadian dollaris one of the world's 
most widely traded currencies, that 
adds substantial credibility. 

POCKET CHANGE 

The RCM was founded in 1908 as a 
branch of the UK Royal Mint and in 
1969 was incorporated as a for-profit 
commercial crown corporation. In 
monarchical Commonwealth countries 
such as Canada, crown corporations 
are government-owned enterprises 
that undertake activities on behalf of 
their sole shareholder—in the RCM's 
case, the Canadian government. 

While the Bank of Canada, a separate 
crown corporation, issues all Canadian 
banknotes, the RCM mints the "pocket 
change" Canadians use every day to 
buyacupof coffee, pay a tra nsit fa re, 
or purchase a newspaper or magazine. 
These include the "Loonie," a CAS1 
coin so nicknamed because it bears the 
image of a common loon on one side, 
and the CAS2 "Toonie," whose nick- 
name blends the words two and loonie. 

Besides Canadian coins, the RCM 
also mints commemorative and col¬ 
lector coins, bullion coins, medals 
and medallions, and even coins for 
other sovereign governments—in 
any given year, the RCM contracts to 
manufacture coins for as many as a 


SNAPSHOT 

ROYAL CANADIAN 
MINT 

mint.ca 

Headquarters: 

Ottawa, Ontario, 
Canada 

Industry: 

Government 

Employees: 

More than 900 
in 2011 

Revenue: 

CAS3.2 billion 
in 2011 

Java technology 
used: 

Java Card 


"Foryears we have been following 
the advent of electronic payments and 
their growth," Brule continues. "Three 
orfouryears ago, we decided to dedi¬ 
cate some research and development 
funding to looking into electronic 
payments and, more specifically, what 
needs in the marketplace weren't 
being fulfil led and whetherthere was a 
role the Mint might play in this emerg¬ 
ing market." 

From that decision came a new digi¬ 
tal currency, prototypes of which were 
introduced last year: the MintChip. 
Many forms of digital currency already 
exist—from electronic funds trans¬ 
fer (EFT) to direct deposit and loyalty 
cards—but the RCM sees the MintChip 
as a potential replacement for physi¬ 
cal currency, both coins and paper, in 


Canada and other 
countries around 
the world. Being 
digital, says Brule, 
the MintChip can 
be denominated in 
almost any world 
currency. 

"We see the 
MintChip as being 
an option to physi¬ 
cal cash," says 
Brule. "We believe 
the MintChip can be 
very cost-effective 
in the low-value 
transactions mar¬ 
ket. It offers a good value proposition 
for merchants and consumers alike 
because it doesn't run across a net¬ 
work, is highly portable, and provides 
chip-to-chip secure communications." 

The MintChip is built entirely on 
Java Card technology, the de facto 
standard platform forsmartcards and 
other small memory footprint devices. 
More than 12 billion Java Card-enabled 
devices have shipped since the plat¬ 
form was introduced in 1997, accord¬ 
ing to Brian Kowal, Java Card business 
manager at Oracle. "Java Card is the 
world's number one leading software 
application platform by volume," says 
Kowal. (See sidebar, "A Pocketful of 
Java Card.") 

Kowal says the MintChip has one 
advantage that none of its rivals thus 


Brule and Everett surround themselves with coins at Royal Canadian 
Mint headquarters in Ottawa. 
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MONEY FOR THE MOBILE GENERATION 

One of the target markets f or the MintChip, at 

least initially, is younger mobile phone users in 
developed and emerging economies worldwide 
who are “unbanked”—that is, they do not have 
regular bank checking or savings accounts and 
regularly deal in cash transactions. 


Java Card was the obvious platform 
choice for the MintChip, says Everett, 
with Brule near the Ottawa River. 




dozen foreign countries. "We operate 
like any other corporation," says Brule. 
"We operate to make a profit, and we 
receive no government funding." 

In prototype form, the MintChip 
is an SD, microSD, UICC (Universal 
Integrated Circuit Card), or USB mem¬ 
ory card containing an integrated cir¬ 
cuit that provides security. It comes 
loaded with the MintChip application; 
the Java Card platform, including a 
Java Virtual Machine (JVM); and an 
operating system. Written in Java, the 
MintChip runs atop the JVM within the 
Java Card runtime, so there's nothing 
to stop it from being deployed in the 
cloud as well, adds Brule. 

All Java Card platform chips—includ¬ 
ing those the MintChip uses—are 
highly secure, says Oracle's Kowal. 


They are certified under the US FIPS 
140-2 and European Common Criteria 
EAL5+ standards, used for military and 
government IDs and payment systems 
worldwide. "What makes this interest¬ 
ing," says Kowal, "is that the MintChip 
could be embedded in an automobile, 
a smart meter, or a personal e-reader 
ortablet and provide payment solu- 
tionsforall a consumer's personal 
connected devices." 

"Java Card hardware has unique 
attributes to secure against physical 
attacks," continues Kowal. "They have 
small memory footprints, are low- 
power, and have a persistent memory 
model that holds transactions even if 
power is removed midway." 

One of the target markets for the 
MintChip, at least initially, is younger 


mobile phone users in developed and 
emerging economies worldwide who 
are "unbanked"—that is, they do not 
have regular bank checking or savings 
accounts and regularly deal in cash 
transactions. 

"The way the MintChip works is 
what we call an asset transfer model," 
explains Dr. David Everett, an indepen¬ 
dent consultant and the MintChip's 
chief technical architect. "The con- 
sumeractually holdsthevaluein their 
chip. If you have a chip in your phone, 
forinstance, the value's actually in that 
chip. And when you make a payment 
to somebody else, it leaves your chip 
and goes to another chip." 

Atypical use case for the MintChip 
would be mass transit, Everett says. 
Consumers load their MintChip 
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A POCkGtflll Of are ’ ^ ^ ou ^ ave a smartcar d in 

, your pocket, it’s a Java Card. More than 
JOVO Lara 2 billion Java Card-enabled smart- 

cards ship every year, and to date, more 
than 12 billion Java Cards have been issued since the technol¬ 
ogy platform was first introduced in 1998. 

The success of the Java Card platform can be traced 
to several technical features, according to Tankar “Ravi” 
Ravishankar, principal engineer at Oracle. When Java Card 
technology was first released, Ravi explains, there were many 
competing platforms that were proprietary and which had 
long development cycles. “Java Card technology enabled 
developers to write applications in Java that could run on 
cards from different vendors, could be developed using off- 
the-shelf tools, and were less error prone,” he says. 

That portability also enabled Java Card developers to move 
applications from credit card-like smartcards to the new 
mobile phones that emerged in the early 2000s, he adds. 

Because smartcards typically use persistent memory such 
as EEPROM or flash, Java Card technology includes persis¬ 
tent objects to meet their special needs, says Ravi. Smartcard 
chips also have no battery power; power is supplied to the chip 
when the card is placed in a reader device. “The Java Card 
platform features a transaction framework to ensure that the 
application state is always consistent,” says Ravi. 

The US Defense Manpower Data Center adopted Java Card 
technology for the US military and government departments. 
Ravi says this has given Java Card technology a high- 
security branding that has been instrumental to its growth 
and acceptance. 



devices—credit card-like smartcards 
or mobile phones—with money from 
a kiosk, an ATM, or across the cloud 
from a PC or tablet. As they board a 
bus or train, they run their MintChip 
device through a reader of some kind, 
instantly transferring the fare amount 
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from the chip in their card or mobile 
phone to the chip in the reader, with 
no intervening computer network or 
back-end bank approvals. 

A NATURAL PLATFORM 

Java Card technology is a natural plat¬ 
form for the RCM's digital currency 
venture. "For us, Java Card was a very 
obvious choice because the platform 
offered us quite a lot," says Everett. 
"There are other platforms, but the 
Java Card platform is ubiquitous, par¬ 
ticularly in the mobile market. We've 
assumed that in general people will be 
using Java applications on Android and 
BlackBerry phones, iOS devices, PCs, 
and other similar mobile devices." 

To spark interest among developers, 
he adds, "we have also provided APIs 
to the MintChip that allow developers 
to use their existing platform, such as 
Java on a mobile phone, which is very 
popular." 

By necessity, MintChip deviceswill 
be highly secure, Everett adds. In addi¬ 
tion to anticipated certification under 
the Common Criteria and FIPS 140-2, 
the MintChip assures users an extra 
layer of security not available in other 
electronic and digital currencies: 
because there's no network or approv¬ 
als involved, no personal information 
is released between the devices and no 
personal information travels over a net¬ 
work. "MintChip transactions can be 
completely anonymous," says Everett. 

A challenge for all smartcard plat¬ 


forms is performance. "In mass tran¬ 
sit, you need to have a very fast perfor¬ 
mance time," says Everett. "This has 
always been a challenge with a virtual 
machine like Java Card to achieve that 
sort of 300-millisecond-type transac¬ 
tion, but we believe it will stand up." 

Given these criteria, says Everett, 
"Java Card came out to be an out¬ 
standing winner." 

To validate the MintChip technology 
and business propositions, the RCM 
announced the "MintChip Challenge," 
a competition for software developers 
to build digital currency applications 
using the MintChip. "We had decided 
we would reach out to 500 software 
developers," says Brule. "We weren't 
sure what the uptake would be, but 
it only took 72 hours to have all 500 
spoken for." 

In the end, 57 qualifying applica¬ 
tions were submitted. The grand prize 
winner, announced in September 
2012, was MintWallet, a cloud-hosted 
peer-to-peer network for sending and 
receiving virtual cash. Surprisingly, 
MintWallet is a Windows-based Java 
Card application, proving that the 
MintChip's digital currency is as por¬ 
table as the real-world pocket change 
it could replace. </articie> 


Philip J. Gill is a San Diego, California- 
based freelance writer and editor who has 
been following Java technology for almost 
20 years. 
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Part 3 


Introduction to Web Service Security 
from Server to Client 


Use Mutual Certificates Security to set up trusted authentication and protection that ensures the 
integrity and confidentiality of messages. 


T his article concludes a 
three-part series that 
focused on ensuring the 
security of Web services from 
server to client. We have 
explored howto secure Web 
services through the follow¬ 
ing mechanisms: 

■ In Parti, we explored 
Username Authentication 
with Symmetric Key to 
generate a certificate/key 
couple shared by the cli¬ 
ent and the server to sign 
and encrypt messages. We 
also used the username/ 
password combination 
to authenticate the client 
during service calls. 

■ In Part 2, we explored how 
to protect the data transit¬ 
ing between the client and 
the server using Secure 
Sockets Layer (SSL) via the 
secure HTTP transport, 
HTTPS. 


code for the application 
designed in this article can 
be downloaded here. 


What Is the Mutual 
Certificates Security 
Mechanism? 

Mutual certification, 
also called shared certi¬ 
fication, is a process or 
technology where two 
communicating entities 
authenticate mutually. 
The Mutual Certificates 
Security (MCS) mecha¬ 
nism provides security 
through authentication 
and message protec¬ 
tion to ensure integ¬ 
rity and confidential¬ 
ity. This mechanism 


provided to the client in 
advance of any communica¬ 
tion, so both the client and 
the server can be sure they 
are dealing with legitimate 
entities, as shown in Figure 1. 


NetBeans IDE 7.2 (avail¬ 
able for download here) 
GlassFish 3.1.2.2 (available 
for download here) 

Metro 1.3 or higher 
(included in NetBeans) 


Client 






Client Certificate 




SOAP Messages 




erver Certificate 
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ierver Certificate 
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Server 


Figure 1 
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Note: This article was tested using 
the latest version of the NetBeans 
IDE (version 7.2, at the time this 
article was written). 

Overview of Adding MCS to the 
Web Service 

What we are going to do is secure 
both sides of the AuctionApp 
application by using the MCS 
mechanism. Specifically, we will 


configure the keystore and the 
truststore for the client and the 
serverto ensure the integrity and 
confidentiality of the message. 

We will perform the following 
tasks: 

■ Secure the Web service by add- 
ingthe MCS mechanism and 
configuring the keystore and the 
truststore for the server 

■ Create and configure a new 


Q AuctionAppSOAPws 


Configure security, reliability and other WS-* features in the 'Quality Of Service' tab. Press FI on a header for details specific 
to its section. 


Quality Of Service 


B AucttonAppSOAPwsPortBindmg 


Version Compatibility: .NET 3.5 / METRO 1.3 (requires METRO 1.3 or higher) 


0 Optimize Transfer Of Binary Data (MTOM) 


Reliable Message Delivery 

] Deliver Messages In Exact Order 


Advanced... 


Secure Service 


Security Mechanism: Mutual Certificates Security 


Configure. 


Mutual certificates for authentication and message integrity and confidentiality protection. 


Use Development Defaults 


Keystore... 

| Truststore... 


Kerberos.., 




Validators... 

Advanced... 



Act As Secure Token Service (STS) Configure.. 


.1 II --Tr-r-, -r. 


OK 


Cancel 


Help 


Figure 2 
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Web client that references the 
Web service by specifying the 
secure Web Services Description 
Language (WSDL) file 

■ Test the noncertified client 
application 

■ Configure the keystore and the 
truststore for the client 

■ Test the certified client 
application 

Note: The application we are 
goingto secureis an online auc¬ 
tion place (like eBay) that we cre¬ 
ated in a previous series of articles 
("Introduction to RESTful Web 
Services"). Sellers post their items 
in listings, and buyers bid on the 
items. A seller can post one or 
many items, and a buyer can bid 
on one or many items. 

Specifically, we are goingto limit 
access to the Java API for XML Web 
Services (JAX-WS) Web service that 
extrapolates the amount of a bid 
by multiplying by a factor (100). 

Add MCS to the Web Service 

It will take less than five minutes 
to add MCS to the Web service 
using NetBeans IDE 7.2. 

1. Add the MCS security mecha¬ 
nism to the AuctionApp 
application: 

a. Open the AuctionApp project 
in NetBeans IDE 7.2 or higher. 

b. Expand the Web Service 
node of the AuctionApp 
project and right-click the 


AuctionAppSOAPws node; 
then select Edit Web Service 
Attributes. 

c. Underthe Quality Of Service 
tab, expand the AuctionApp 
SOAPwsPortBinding section. 

d. Make sure the Reliable 
Messaging Delivery option is 
deselected. 

e. Select Secure Service 

and then select Mutual 
Certificates Security from the 
Security Mechanism list, as 
shown in Figure 2. 

2. Configure the keystore to 
specify the alias identifying 
the server certificate and pri¬ 
vate key for the AuctionApp 
application: 

a. Deselect Use Development 
Defaults if it is selected. 

b. Click the Keystore button, 
and then click the Load 
Aliases button and select 
xws-security-server, as 
shown in Figure 3. 

c. Click OK. 

At this point, NetBeans 
creates a new Web Services 
Interoperability Technologies 
(WSIT) configuration that 
contains the security ele¬ 
ments within the soKeyStore 
tags of the wsit-com 
.bonbhel. oracle. auctionApp 
.AuctionAppSOAPws.xml 
file, as shown in Figure4. 

The file is located in the Web 
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Pages/WEB-INF node of the 
AuctionApp project. 

3. Deploy the service and 
display the WSDLfile 
so you can inspect the 
sp:AsymmetricBinding tags: 

a. Right-click the AuctionApp 
node and choose Deploy. 

b. Open your browser and type 
the WSDL URL: http:// 
local host:8080/AuctionApp/ 


AuctionAppSOAPws?wsdl. 

The Web service presents its 

WSDLfile, as shown in 

Figure 5. 

The sp:AsymmetricBinding tags 
contain all we need to encrypt 
and sign the SOAP message using 
asymmetric key algorithms 
(public/private key combinations). 
This tag should contain nested 
elements such as the following: 



Figure 3 
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■ <sp:InitiatorToken>: The initiator 
token refers to the public/ 
private key-pair owned by the 
initiator. 

■ <sp:X509Token>: This tag speci¬ 
fies that the X.509 certificate 
token profile will be used. It 
contains the spdncludeToken 
attribute, which is responsible 
for adding the public key to the 
message sent to the recipient. 


Create a New Web Client 

In this section, we are going to cre¬ 
ate and secure a new Web service 
client that references the Web 
service that we just secured. 

To do this, we will create a sam¬ 
ple Web client application by using 
the Web Service Client wizard pro¬ 
vided by NetBeans IDE 7.2 to gen¬ 
erate the code and everything we 
need for looking up a Web service. 


■rise: Key St or ^ vapp i V2.5ibilz.zy="pri"a“ e* 


alia 3*"j(wa -accuri zy ae rver" 


at czcpaa a®” chang ext" type*" JF.3 " 


Ic cat i en*”, , . me tb e am a \ ".1.2 \ Jdtf ig\ G deana m 1 \ 

ccmligXkcyauure oJ£a”/> 


Figure 4 


▼ < sp:As ymme t ricBinding> 

▼ <wsp:Folicy> 

► <sp:AlgorithmSuite>. . . </sp : AlgorithinSuite> 

<sp:IncXudeTimestamp/> 

▼ <sp: InitiatorToken> 

▼ <wsp:Policy> 

▼ <3p :X509Token sp : IncludeTok:en= w littp : //docs . oasis-open. org/ws-sx/ws- 
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< sp:WssX5 0 9V3To kenl0/> 

</wsp:Policy> 

</sp:X509Token> 

</wsp:FoXicy> 

</sp: InitiatorTok:en> 

► <sp:Layout> ... </sp:Layout> 

< sp:CnlySignEntir eH e a de r 3An dB o dy/> 

▼<sp:RecipientToken> 

▼<wsp:Policy> 

▼<sp:X509Token 3p:IncludeToken= w tittp ://docs.oasis-open.org/ws-sx/ws- 
3ecuritypolicy/200702 / IncIudeToken/Never n > 

▼ <w3p:PoIicy> 
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</wsp:Policy> 

</sp:X5 0 9T o ken> 
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</w3p:Policy> 

</sp: AsyinmetricBinding> 

Figure 5 
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Let's code this application in five 
minutes. 

1. Generate the initial NetBeans 
project: 

a. From the File menu, choose 

New Project. 

b. From Categories, select java 
Web. 

c. From Projects, select Web 

Application. 

d. Click Next. 

e. Type 

AuctionAppWebServiceClient 
for the project name and click 

Next. 

f. Make sure the server is speci¬ 
fied as GlassFish Server (or 
similar wording). 

g. Click Finish. 

2. Create the Seller entity: 

a. Right-click the 
AuctionAppWebServiceClient 
project and select New; then 
select Entity class. 

b. Type Seller in the Class Name 
field, type com.bonbhel.oracle 
.AuctionAppWebServiceClient 
in the Package field, and click 
Next. 

c. In the Provider and Database 
screen, select EclipseLink 

(] PA 2.0) (default) from the 
Persistence Provider list. 

d. From the Data Source list, 
select jdbc/sample, which is 
the datasource provided by 
NetBeans. 

e. Click Finish. 


3. Perform actions similar to 
Step 2 to create the Item and 
Bid entities. 

Now we are going to add 
properties to the entities 
using the NetBeans wizard. 

4. Open the Seller.java file, 
right-click anywhere in the 
code, and select Insert code. 

5. From the Generate wizard, 
select Add property, and add 
the seller properties (String 
lastName, String firstName, 
and String email). 

6 . Open the Item.java file and 
add the item properties 
(String title, String description, 
Double initia I Price, and Seller 
seller). 

7. To define the entity relation¬ 
ship, click the NetBeans 
warning (lightbulb) and 
select Create bidirectional 
ManyToOne relationship. 

This action creates a list of 
items in the Seller entity. 

8 . Open the Bid.java file and add 
the item properties (String 
bidderName, Double amount, 
and Item item). 

9. To define the entity relation¬ 
ship, click the NetBeans 
warning and select Create 
bidirectional ManyToOne 
relationship. 

10. Generate the Getters and 
Setter, respectively, for the list 
of items and bids created in 
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LISTING 1 


@Entity 

public class Seller implements Serializable { 
@OneToMany(mappedBy = "seller") 
private List<Item> items; 
private static final longserialVersionUID = 1L; 

@Id 

@GeneratedValue(strategy = GenerationType.AUTO) 

private Long id; 

protected String firstName; 

protected String lastName; 

protected String email; 

public List<Item> getltems() { 
return items; 

} 

public void setItems(List<Item> items) { 
this.items = items; 

} 

Download all listings in this issue as text 


the Seller and item entities 
by right-clicking anywhere in 
the code and selecting Insert 
code. 

11. From the Generate wizard, 
select Getter and Setter. 

At this point, your Seller.java 
file will look like Listing 1. 

12. The client implementation 
we are going to build con¬ 
sists of JavaServer Faces (JSF) 
pages based on the entities 
just created. Create the JSF 
pages: 

a. Right-click the AuctionApp 


WebServiceClient project and 
select New; then select JSF 

Pages from Entity Classes, 
click Add all, and click Next. 

b. For Session Bean Package, 

type a name such as 
com.bonbhel.oracle 
. AuctionAppWebServiceClient 
.facade, and for JSF Classes 
Package, type a name such 
as com.bonbhel.oracle 
.AuctionAppWebServiceClient 
.controller. 

c. For Folder Name, type a 
name such as jsfClient. 




























//new to java / 


d. Click Finish. 

13. We are going to use the Web 
Service Client wizard to create 
the Web service client. We will 
assume thattheJAX-WS Web 
service is an external service 
that resides in the application 
tier over the network. So, we 
will use the URL to theJAX-WS 
Web service WSDL fi le. Create 
the Web service client: 

a. Make sure the AuctionApp 
project is up and running. 

If it is not, right-click the 
AuctionApp node and choose 
Deploy. 

b. Right-click the 

WebServiceClientSecureSSL 

node and choose New; then 
select Web Service Client. 


c. From the New Web Service 
Client wizard, select WSDL 
URL, and then specify the URL 
to the Web service WSDL file 
using the fully qualified host 
name, for example, http:// 
localhost:8080/AuctionApp/ 
AuctionAppSOAPws?wsdl, as 
shown in Figure6. 

d. Accept all other default set¬ 
tings. The package name will 
be taken from the WSDLfile. 

e. Click Finish. 

14. Add the extrapolateAmount 

Bid operation provided by the 
JAX-WS Web service to the 
client classes: 
a. Open the Source 
Packages node of the 
AuctionAppWebServiceClient 



Figure 6 
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LISTING 2 LISTING 3 


private Double extrapolateAmountBid 

(double amountBid, int factor) { 

com. bon bhel.oracle.auctionapp.ws.AuctionAppSOAPws 

port = service.getAuctionAppSOAPwsPort(); 

return port.extrapolateAmountBid(amountBid, factor); 

} 


Download all listings in this issue as text 


project and double-click the 
BidController.java file located 
in the controller package 
com.bonbhel.oracle 
.AuctionAppWebServiceClient 
.controller. 

i. Put your cursor anywhere 
inside the source editor. 

:. Expand the Web Service 
References node of the 
AuctionAppWebServiceClient 
project and drag the 
extrapolateAmountBid node 
inside the source editor. 

The extrapolateAmountBidQ 
method appears at the end of 
the BidController class code, as 
shown in Listing 2. 

Note: Alternatively, you can 
right-click anywhere in the 


source editor and choose Insert 
Code; then select Call Web 
Service Operation and click the 
extrapolateAmountBid opera¬ 
tion in the Select Operation to 
Invoke dialog box. 

15. We need to add some code 
application logic in the 
BidController class in orderto 
extrapolate the amount of the 
bid (by factor, which is 100) 
when the user edits or views 
the bid entry. So call the 
extrapolateAmountBid opera¬ 
tion to extrapolate the bid: 

a. Open the BidController.java file 
in the source editor. 

b. Modify the public String 
prepareView() method, as shown 
in Listing 3. 
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At this point, the secured Web 
service client is regenerated and 
references the secured Web ser¬ 
vice WSDLfile. 



Figure 7 
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Test the Noncertified Client 
Application 

Now it's time to test the service. 
We will invoke the secured Web 
service from the client application 
before we provide the server cer¬ 
tificate to the client. 

Try to invoke the secured Web 
service from the noncertified cli¬ 
ent to display the extrapolated 
amount of a bid: 

1. Make sure the AuctionApp 
project is up and running. 

If it is not, right-click the 
AuctionApp node and choose 
Deploy. 

2. Open the Web Service 
References node of the 
AuctionAppWebServiceClient 
project and right-click the 
AuctionAppSOAPws node; 
then select Refresh. 

3. From the Confirm Client 
Refresh wizard, make sure 
Also replace local wsdl file 
with original wsdl located at: 
is selected; then click Yes. 

4. Right-click the 
AuctionAppWebServiceClient 
project and choose Clean and 
Build. 

5. Right-click the 
AuctionAppWebServiceClient 
project again and choose Run. 
The list of all entries is dis¬ 
played, as shown in Figure 7. 

6. Click the Show All Bid Items 
linkto display the list of bid 
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Figure 10 


entries, as shown in Figure 8. 

7. Click the View link for the 
bidder named Vais to see the 
newly extrapolated amount 
of the Vais bid, as shown in 
Figure 9. 

As you can see, the amount of 
the bid changed from 12.0 to 0.0. 
This means that the client failed to 
call the secured Web service. 


Configure the Keystore and 
Truststore for the Client 

In this section, we are going to 
provide the server certificate to the 
client by performing the following 
tasks: 

■ Configure the keystore to 
point to the alias for the client 
certificate 

■ Configure the truststore that 
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contains the certificate and 
trusted roots of the server 
1. Configure the keystore for 
the client: 

a. Make sure the AuctionApp 
project we opened previously 
is up and running. If not, 
right-click the AuctionApp 
node and choose Deploy. 

b. Expand the Web Service 
References node of the 
AuctionAppWebServiceClient 
project and right-click the 
AuctionAppSOAPws node, 


then select Edit Web Service 
Attributes. 

c. Underthe Quality Of Service 
tab, select the Security sec¬ 
tion, as shown in Figure 10. 

d. Deselect the Use develop¬ 
ment defaults option if it is 
selected. 

e. Click the Keystore... button, 
click the Load Aliases button, 
and select xws-security- 
client, as shown in Figure 11. 

f. Accept all other default set¬ 
tings and click OK. 


Q Keystore Configuration 


Location: 

Keystore Password: 
Alias: 

Key Password: 

Alias Selector Class: 


ans\7.1.2\c onfig\GF3 l\domain l^config^eystore. jks 


Browse.., 


xws-security-client 


Load Aliases 


Browse... 


OK 


Cancel 


Figure 11 



Figure 12 


ORACLE.COM/JAVAMAGAZINE ////////////////////////////////// JANUARY/FEBRUARY 2013 


2. Configure the truststore for 
the client: 

a. Click the Truststore... button, 
click the Load Aliases 
button, and select xws- 
security-server, as shown in 

Figure 12. 

b. Accept all other default set¬ 
tings and click OK. 

c. Compile the applica¬ 
tion by right-clicking the 
AuctionAppWebServiceClient 
node and selecting Build. 

At this point, the client and 
the server are authenticated with 
certificates. The client keystore is 
pointing to the alias forthe cli¬ 
ent certificate, and the 
truststore contains the 
certificate and trusted 
roots of the server. 

Test the Certified 
Client Application 

Now we are ready for 
the real test. We are 
goi ng to try to i nvoke 
the secured Web ser¬ 
vice from the certified 
clientto display the 
extrapolated amount 
of a bid usingthe MCS 
mechanism: 

1. Make sure the 
AuctionApp proj¬ 
ect is up and run¬ 
ning. If it is not, 
right-click the 


AuctionApp node and 
choose Deploy. 

2. Right-click the 
AuctionAppWebServiceClient 
project and choose Deploy. 

3. Right-click the 
AuctionAppWebServiceClient 
project again and choose 
Run. 

The list of all entries is dis¬ 
played, as shown in Figure 13. 

4. Click the Show All Bid Items 
link to display the list of bid 
entries, as shown in Figure 14. 

5. Click the View link forthe 
bidder named Vais to see the 
newly extrapolated amount 

of the Vais bid, as shown 
in Figure 15. 

As you can see, the 
amount ofthe bid 
changed from 12.0 to 
1200.0. This means 
that the client suc¬ 
ceeded in calling the 
secured Web service. 
Bravo! 

Conclusion 

In this article, we have 
seen how easy it is to 
add a new security layer 
to an existing applica¬ 
tion to protect the com¬ 
munication between the 
client and the server. 

This series of articles 
provided an overview 
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of the principal aspects of Web 
services through the following 
mechanisms: 

■ Using a username/password 
combination to access the 
service 



Figure 13 
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■ Protecting the data transit¬ 
ing between the client and the 
server 

■ Establishing a mutual certifi¬ 
cate between the client and the 
server 

As demonstrated, NetBeans 
and GlassFish make adding 
security for Web services easier 
than ever. </article> 

/learn more 

• NetBeans Advanced Web Service 

Interoperability, manual 

• Metro User Guide 

• GlassFish resources 
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Demystifying invokedynamic 
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JULIEN PONGE 

$33 


T he release of java 7 

brought substantial addi¬ 
tions to the language, such as 
the new try-with- resources 
statement, multi-catch 
clauses, and the diamond 
operator. New APIs have 
been introduced, too, with 
notable examples being the 
fork-join framework for par¬ 
allel algorithms and NI0.2 
to better deal with native file 
system capabilities. 

Another much-touted 
change is the introduction of 
a newjava Virtual Machine 


(JVM) bytecode instruction 
called invokedynamic. It was 

introduced to facilitate the 
implementation of dynamic 
languages on top of theJVM, 
which is an attractive target 
platform with a robust adap¬ 
tive runtime that, in recent 
years, has seen many lan¬ 
guages flourish. Some are 
ports of existing languages 
to the JVM (for example, 
Rhino, Jython, and JRuby) 
while some are new (for 
example, Groovy, Clojure, 
and Fantom). 


This article is a gentle 
introduction to using invoke 
dynamic in your own code. 
The topic in itself is fairly 
rich and will mostly appeal 
to language and middle¬ 
ware implementers. We will 
only scratch the surface of 
the provided APIs and pos¬ 
sible usages, but by the end 
you should have a basic 
technical understanding of 
invokedynamic. 

Note: Thesourcecodefor 
the examples in this article 
can be downloaded here. 
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Julien Ponge chats with Oracle’s Stephen 
Chin about invokedynamic as part of Chin’s 
NightHacking Tour across Europe. 


Invoking Methods on 
theJVM 

The JVM has traditionally 
offered four instructions 
for invoking methods. Each 
points out an owner class, 
a name, and a signature 
description. As an example, 
given a static method void 
baz(int a, String s) in class 
foo.Bar, invoking the method 
requires a reference with 
foo/Bar as the owner, baz 


as the name, and (ILjava/ 
lang/Stri ng;)V as the JVM 

internal representation sig¬ 
nature. Invoking a method 
requires placing a receiver 
object—that is, the object on 
which the method shall be 
invoked—on the stack. The 
only exception is the case of 
static methods, which do not 
have a receiver. 

The following are the four 
invoke instructions: 

■ invokestatic, which is used 
for static methods. 

■ invokevirtual, which is used 
for methods that require 
dynamic dispatch, that 

is, public and protected 
methods. 

■ invokeinterface, which is 
similar to invokevirtual, 

except that the method 
dispatch is based on an 
interface type. 

■ invokespecial, which is for 
the other types of meth¬ 
ods: constructors and 
private virtual methods. 
The method dispatch is 
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not performed based on the 
receiver type but rather based on 
the specified owner class (this is 
how the super reference works). 
The design of the JVM makes 
perfect sense because it was 
originally created for a strongly 
typed language, Java. In such a 
language, it is sufficient to check 
method invocations at compile 
time. Hence, it is both easy and 
natural to produce bytecode 
where invocations unambigu¬ 
ously specify a target. Signature 
descriptors exactly match those 
of the target methods. 

The Case of Dynamic Languages 

Things are slightly different with 
loosely typed dynamic languages 
such as Groovy, JRuby, or Jython. 

In such languages, types are most 
often not checked at compile 
time. It is up to the programmer 
to pass a "good" type, and failing 
to do so results in an error at run¬ 
time. Thus, in such languages, the 
closest "accurate" JVM type for a 
method argument is more often 
than not java.lang.Object. It easily 
follows that this complicates type 
analysis (which has to be done 
mostly at runtime) and affects 
performance. 

Dynamic languages also often 
support a form of monkey- 
patching, that is, the ability to add 
methods and fields to and remove 


methods and fields from existing 
classes. Some languages even sup¬ 
port doing so at the instance level. 
For all these reasons, it is necessary 
to defer the resolution of classes, 
methods, and fields to the runtime. 
It is also necessary to dynamically 
update the resolved entities at run¬ 
time. Also, there is often a need for 
adapting a method invocation to a 
target of a different signature. 

Dynamic languages on the JVM 
have traditionally built ad hoc 
runtime support on top of the JVM. 
This includes using wrappertype 
classes; building custom inline 
caches for invoking methods; 
interpreting, tracing, and generat¬ 
ing specialized bytecode; or using 
hash tables to provide dynamic 
symbol resolution. In doing so, 
such languages generate bytecode 
with entry points to the runtime 
in the form of method calls using 
either of the four existing bytecode 
instructions for invocations. 

Here Comes invokedynamic 

The main problem is that of per¬ 
formance. The bytecode generated 
by dynamic languages tends to 
require several actual JVM method 
invocations in order to perform 
one in the dynamic language. 
There is extensive use of reflection 
and dynamic proxies, which have 
a performance cost. Last but not 
least, such code tends to target 
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common language runtime classes 
and methods. 

In short, because there are many 
different execution paths with 
great variance in actual types, the 
adaptive runtime—just-in-time 
(JIT) compilation—has trouble 
applying optimizations. Although 
dynamic language implement- 
ers have used clevertechniques, 
it remains true that the JVM has 
issues understanding what such 
code does, thus hindering perfor¬ 
mance. The bytecode emitted by 
such languages lacks information 
and patterns that the JVM knows 
howto optimize, which are typi¬ 
cally present in bytecode gener¬ 
ated from Java. One can argue that 
this is a matter of making the JVM 
more aware of new patterns, but 
the fact that bytecode is typed also 
gets in the way. 

The introduction of invoke 
dynamic to the JVM specifica¬ 
tion is recognition of the fact that 
dynamic languages bring value to 
the Java ecosystem and, as such, 
the JVM needs to provide bet¬ 
ter support for them. This new 
bytecode instruction is able to 
defer the invocation target resolu¬ 
tion to some runtime logic, and it 
provides support for dynamically 
changing call site targets. It also 
has support in the JVM internals so 
that it can be better optimized by 
the JIT compiler. 


Method Handles 

Method handles are analogous 
to the function pointers found in 
languages such as C in the sense 
that they point to a target and 
can be used to invoke it. Method 
handles can be obtained and 
manipulated by usingthe new 
java.lang.invoke API. 

Getting and invoking. Listing 1 is 
an example in which we obtain 
a method handle to the Boolean 
startsWith(String) instance method 
of the java.Iang.String class and 
then invoke it. 

We first need an object of type 
MethodHandles.Lookup to search 
for targets that include virtual 
methods, static methods, special 
methods, constructors, or field 
accessors. 

A lookup object is dependent 
on the invocation context of a 
call site. As an example, a lookup 
made in a class A cannot see the 
private methods of a class B. When 
invoking the lookup method in 
Listing 1, we obtain a lookup object 
that respects the accessibility rules 
from within the main method of 
Samplel.The preferred way to look 
up only public methods is to call 
Method Hand les.publicLookup. 

Once this is done, we can call 
the findVirtual method. The first 
argument is the class in which to 
look for the method. The second 
argument is the method name, 
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while the third one is an instance of 
MethodType. Here, the method that 
we are looking for returns a Boolean 
and takes a string as a parameter. 

Note that we actually pass three 
arguments to build the type: the 
return type followed by the argu¬ 
ment types. Indeed, startsWith is 
a virtual method, so its first call 
argument must be the receiver 
type, which here is a string, too. 

Finally, we perform two invoca¬ 
tions by printing whether Java and 
Groovy start with j. 
java.lang.reflect integration. J ust 
looking at the example in Listing 1, 
you could think that method han¬ 
dles can be used in place of reflec¬ 
tive method invocations. Worse, 
you could think that java.lang 
.invoke is a possible replacement 
for reflection. This is far from the 
truth, because both APIs comple¬ 
ment each other. 

You need to know the exact 
signatures of the elements to be 
looked up using Method Handles 
.Lookup. There is no way to look for 
the methods, constructors, and 
fields of a class just by their names 
without knowing their precise 
signatures. To do that, you should 
simply stick to the well-known 
reflective APIs in java.lang.reflect, 
and then use either of the unreflect 
methods found in MethodHandles 
.Lookup that provide bridging 
between reflection and method 


handles. This is especially useful 
when writing dynamic applica¬ 
tions where you need to look up 
elements by name, but the exact 
signatures are not known. 

■ The example in Listing 1 with 
method handles can be equiva¬ 
lently coded as shown in 
Listing 2, in which the target 
method handle is found using 
reflection. 

If we were to stop our explo¬ 
rations of invokedynamic here, 
there would not be many dif¬ 
ferences between an invocation 
using reflection and one using a 
method handle. Still, it should be 
noted that every reflective invoca¬ 
tion induces verifications at the 
JVM level. This is not the case with 
method handles, because those 
verifications happen only when 
method handles are built. 
Combinators. While method 
handles can directly map to class 
methods, it is possible to build 
more-elaborate method handles 
by combining several of them. This 
is useful in many situations, such 
as when there is a need to adapt 
a call site and a target of different 
types, to process arguments and 
return values, or to provide con¬ 
ditional branching. In this regard, 
guards are an especially useful 
building block for constructing 
more-complex call-site logic as is 
found in inline caches. 
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package sampler- 


import java, la ng.invoke.Method Handle; 
import java.la ng.invoke.Method Handles; 
import java.la ng.invoke.Method Handles.Lookup; 
import static java.lang.invoke.MethodType.methodType; 

public class Samplel { 

public static void main(String... args) throws Throwable { 
Lookup lookup = MethodHandles.lookupQ; 

MethodHandle startsWith = lookup.fi ndVi rtual( 
String.class, "startsWith", 

methodTypefboolean.class, String.class)); 

// Prints "true" 

System, out. println(startsWith.invokeWithArguments( 
"Java", "j")) ; 

// Prints "false" 

System, out. println(startsWith.invokeWithArguments( 
"Groovy", "J")); 

}} 

Download all listings in this issue as text 


Let's start with a simple exam¬ 
ple. In Listing 2, we obtained a 
method handle to the startsWith 
method of the String class. Now, 
in Listing3, let's instead build 
a method handle that checks 
whether a string given as a receiver 
starts with ). 

To do this, we need to perform 
a form of partial function applica¬ 
tion that binds the first invocation 
argument of the method to the 
constant value ). The java.lang 


.invoke.MethodHandles class pro¬ 
vides many combinators, that is, 
methods to derive new method 
handles from existing ones. In our 
case, we take advantage of 
insertArguments to bind the ele¬ 
ment at index 1. This method 
works as follows: it takes a method 
handle, an index where arguments 
will be inserted, and a variable 
arguments list of values to insert. 

The other combinators can 
remove elements; permute ele- 
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merits; wrap arguments to or 
unwrap arguments from an array; 
perform type conversions; and 
more. While it is beyond the scope 
of this article to provide a com¬ 
plete overview of each of these, 
you will discover some commonly 
used ones if you keep reading. 
Example of call site and target 
adaptation. You will often run into 
the problem of adapting call sites 
and targets when working with 
invokedynamic. Suppose that you 
have a method printAII declared as 
shown in Listing4. 

Clearly, printAII is of type (String, 
Object[])void. In Java, invocations 
of this method would call sites 
such as those shown in Listing 5. 

Now suppose that we have call 
sites expecting something differ¬ 
ent, such as a method that takes 
a fixed number of parameters and 
no prefix string. Clearly, the signa¬ 
tures do not match. A fix would be 
to introduce an adaptation method 
such as that shown in Listing 6. 

Such an adaptation is simple to 
perform using method handles 
and combinators, as shown in 
Listing 7. 

First, target is a direct method 
handle to the printAII static 
method. We use the bindTo com- 
binatorto bind the first argument 
to a value. In the case of a static 
method, this is effectively the first 
argument, while in the case of an 


instance method, the object would 
be the receiver. 

Then, the asCollector combi- 
nator wraps arguments into a 
collecting array. Here, we bind 
four arguments into an array of 
Object instances. Using the code 
in Listing 8, we can check that the 
resulting method handle is of type 
(0 bj ect, 0 bj ect, 0 bj ect, 0 bj ect) voi d 
and that invoking it with argu¬ 
ments of the expected arityworks. 

Performance-wise, you should 
useinvokeExact rather than 
invokeWithArguments whenever 
you can. invokeExact requires 
the argument types to be exactly 
like those of the method handle 
type descriptor, and it dispatches 
the call much faster. In contrast, 
invokeWithArguments performs 
type checks and conversions. 

A classic optimization for virtual 
methods is to build inline caches 
where the target method handle 
is cached as long as the receiver 
type remains stable. You should 
limit the cache depth in case the 
call site happens to be mega- 
morphic; otherwise, you would 
create too many method handles 
arranged in a chain of guarded 
tests, which further degrades the 
performance figures. 

Bootstrapping 

At this point, you should have 
a basic understanding of what 
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static void printAII (String prefix, Object... values) { 
for (Object value: values) { 

System.out.println(prefix + value); 

} 

} 


Download all listings in this issue as text 


method handles are. We can now 
tu rn to the bootstra pping side of 

invokedynamic. 

CallSite objects. Call sites need 
to be bound at runtime usingthe 

java.lang.invoke API. To do that, 
each invokedynamic instruction 
refers to a bootstrap method that 
is executed the first time the call 
site invocation is executed. 

The bootstrap method must 
return an instance of java.lang 
.invoke.CallSite. As the name sug¬ 
gests, such objects represent a call 
site, and they are bound to a target 
method handle, which may, in 
turn, be a chain of combinators. 

The CallSite can be thought 
of as the containerforthe 
MethodHandle. Once it has been 
bound, a call site always refer¬ 
ences the same CallSite instance. 
Although the CallSite itself will 
refer to the same program point 
throughout its lifecycle, call sites 
may allow their target method 
handle to be redefined, provid¬ 


ing a way to swap out old code 
with new code on the fly, without 
regenerating the bytecode for an 
entire method. 

The java.lang.invoke package 
offers three concrete implementa¬ 
tions of the abstract CallSite class, 
and you can subclass them, too: 

■ ConstantCallSite is for call sites 
whose target method handle 
never changes. 

■ MutableCallSite has object field 
semantics, which means that 
the target method handle can 
be changed. 

■ VolatileCallSite is similar to 
MutableCallSite but with volatile 
reference semantics. 

If you need a call site where the 
target can be changed, choos¬ 
ing between MutableCallSite 
and VolatileCallSite is a matter of 
understanding the Java memory 
model and weighing the conse¬ 
quences of choosing one versus 
the other. In multithreaded envi¬ 
ronments, a volatile call site target 
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change will be immediately visible 
to all threads, while with ordinary 
field semantics, thread caching 
occurs and requires explicit syn¬ 
chronization (see the static 
syncAII method in MutableCallSite). 
Of course, there are performance 
implications, too. 

Bootstrap methods, invokedynamic 

bootstrap instructions are bound 
by invoking a static method that 
returns a CallSite object that must 
take at least three parameters: 

■ A MethodHandles 
.Lookup object that is 
bound to the classes 
visible in context of 
the call site 

■ A symbolic name as a 
string 

■ A MethodType that 
corresponds to the 
type that is expected 
by the call site (this 
is often useful for 
performing a final 
asType() combinator invocation 
to ensure that method handles 
match) 

Other parameters can be passed 
as extra arguments, with the only 
constraint being that they must be 
constant values, which means they 
can be written to the constant pool 
of a class bytecode representation. 
This is the case for primitive types, 
strings, class references, and 
method handles. 


Sticking to the example in 
Listing 8, which obtained a 
method handle forthe printAII 
method, the code in Listing 9 
would be a possible call site boot¬ 
strap method. 

This method returns a non- 
modifiable call site, where the pre¬ 
fix string is bound to ">>>" and the 
remaining arguments are collected 
as variable arguments. The result¬ 
ing call site is of type (Object[]) 
void. Note that because a string 
is a constant, we could 
also obtain the prefix as 
an extra parameter, and 
the value would depend 
on what is referenced 
from the call site in the 
bytecode. In this case, 
the bootstrap method 
would be as shown in 
Listing 10. 

It is easy to test the 
bootstrap method to 
verify that it works as 
intended. Indeed, call sites pro¬ 
vide a dynamiclnvoker method that 
returns a method handle. Thus, 
you can use it as we've previously 
seen (see Listing 11). 

Emitting Bytecode with 
invokedynamic Instructions 

We are now ready to assemble 
the final pieces and actually put 
invokedynamic into practice. While 

the java.lang.invoke API can be 


KEY FOR LAMBDAS 


Java 8 is 
poised to take 
advantage of 
invokedynamic as 
a way to support 
lambdas. 


ORACLE.COM/JAVAMAGAZINE //////////////// ////////////////// JANUARY/FEBRUARY2013 


LISTING 10 / LISTING 11 


LISTING 12 


public static CallSite bootstrap(Lookup lookup, String name, 
MethodType type) throws Throwable { 
MethodHandle target = lookup.findStatic( 

Sample3.class, "printAII", 

methodType(void.class, String.class, Object[].class)) 
.bindTo(">>> ") 

.asVarargsCollector(Object[].class) 

.asType(type); 

return newConstantCallSite(target); 

} 


Download all listings in this issue as text 
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used as is, it remains to be seen 
how it can be leveraged directly 
from bytecode instructions. 

As of Java 7, there is no language 
construct that translates into 
invokedynamic instructions at the 
bytecode level. This might change 
in Java 8 because some of the 
support for lambdas is likely to be 
implemented with invokedynamic. 

In order to bootstrap a call site 
and leverage a method handle, we 
need to use a third-party library 
to write bytecode. The ASM library 
is our weapon of choice, because 
it helps in reading, writing, and 
transforming bytecode. 

Another option for simpler cases 
is to use a tool such as 
Indijy that can replace 
some marked call sites 
with an invokedynamic 
call, but leveraging ASM 
leaves no magic behind. 

Let's consider the 
code in Listing 12. 

The code generates a 
sample3.Caller class as 
a subclass of java.lang 
.Object. It has a main 
method that loads two 
strings and then calls a 
console:print function of 
type (Object, Objectjvoid 
that is bootstrapped 
using the static method 
that we defined earlier. 

The symbolic name 


for the function can be anything, 
but it is common to normal¬ 
ize names and separate portions 
using a colon, as in property:get, 
property:set, and so on. 

We can run this method, as 
shown in Listing 13, and see that 
the invokedynamic instruction is 
correctly bound at runtime. We 
can also check the generated byte¬ 
code with the javap decompiler 
that comes as part oftheJDK, as 
shown in Listing 14. 

Conclusion 

This article introduced invoke 
dynamic, a new instruction backed 
with runtime API support for facili- 
tatingthe implemen¬ 
tation and execution 
of dynamic languages 
on top of the JVM. The 
java.lang.invoke API 
provides a rich set of 
operations to adapt a 
call site to a target that 
might be of a different 
signature type. 

Existing dynamic 
languages for the JVM 
(for example, Groovy 
and JRuby) are start¬ 
ing to support invoke 
dynamic. In the long 
run, this should reduce 
the footprint of their 
runtime support code 
because maintain- 


BETTER SUPPORT 


The introduction 
of invokedynamic 
to the JVM 
specification is 

recognition of the 
fact that dynamic 
languages bring 
value to the Java 
ecosystem and, as 
such, the JVM needs 
to provide better 
support forthem. 
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LISTING 13 LISTING 14 


S java -classpath code/build/classes sample3.Caller 
>>> World 
>>> Hello 


Download all listings in this issue as text 


ingjava 6 backward compatibility 
will become less of an issue. Fresh 
language implementations, such 
as Oracle's Nashorn (JavaScript), 
Remi Forax' PHP.reboot, or the 
present author's yet-to-be- 
released Golo language, are based 
on nvokedynamic from the get-go. 
Java 8 is poised to take advan¬ 
tage of invokedynamic as a way to 
efficiently implement the sup¬ 
port of lambdas. Finally, deriva¬ 
tive usages—such as the JooFlux 
research project, which provides 
dynamic code replacement and 
aspect-oriented programming- 
are starting to appear. 

While invokedynamic is mostly 
useful to language and middleware 
implementers, let nothing restrain 
your creativity! Are you thinking of 
derivative usages? Are you think¬ 
ing about creatingyet another 


language? In any case, there is no 
harm in trying, and who knows 
what you might come up with. 

Acknowledgements. The author 
would like to thank Marcus 
Lagergren for his very constructive 
feedback. </article> 
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Java Compiler Plug-ins in Java 8 

Use a new plug-in mechanism to extend the Java compiler with new behavior. 


ava 8 will bring a new 
mechanism that allows you 
to write plug-ins for the Java 
compiler (javac). A compiler 
plug-in lets you add new 
phases to javac without mak¬ 
ing changes to its code base. 
New behavior can be encap¬ 
sulated in a plug-in and 
distributed for other people 
to use. For example, javac 
plug-ins could be used to do 
the following: 

■ Add extra compile-time 
checks 

■ Add code transformations 

■ Perform customized anal¬ 
ysis of source code 

Note: The API for creating 
javac plug-ins is still experi¬ 
mental for JDK 8; it is sched¬ 
uled to ship in 2013. 

In this article, we show how 
you can write a simple, cus¬ 
tomized source code analysis 
tool so you can learn howto 
leverage the plug-in mecha¬ 
nisms foryour own applica¬ 
tions. We find code patterns 
that check whetherthe result 


of calling get() on an object 
that is a subtype of Map is 
null. In otherwords we are 
looking for patterns such as 
the following, where expris a 
subtype of java.util.Map. 

| expr.get(key) == null 

This pattern could be con¬ 
tained within a conditional 
expression, a return state¬ 
ment, and so on. It should be 
reported in all cases. 

How Do Plug-ins 
Differ from Annotation 
Processors? 

Here are some ways that 
plug-ins differfrom annota¬ 
tion processors: 

■ Plug-ins are more flexible. 
They can run at various 
points in the compila¬ 
tion pipeline through a 
TaskListener. 

■ Plug-ins do not use the 
model of processing 
rounds, which incurs addi¬ 
tional overhead. 


■ Plug-ins have a simpler 
interface. 

■ Annotation processors 
are defined by a standard 
(JSR 269). Plug-ins are 
javac-specific. 

■ Plug-ins require the use of 

a ServiceLoader. 

Java Compiler Plug-in 
Architecture 

A javac plug-in supports two 
methods: 

■ First, a getName() method 
that returns the name of 
the plug-in for identifica¬ 
tion purposes 

■ Second, a call() method 
that is invoked by thejavac 
with the current environ¬ 
ment it is processing 

The call() method gives 
access to the compiler func¬ 
tionalities through a JavacTask 
object, which allows you to 
perform parsing, type check¬ 
ing, and compilation. In 
addition, the JavacTask object 
lets you add observers (which 
are instances of TaskListener) 


to various events gener¬ 
ated during compilation. 

This is done through the 
method addTaskListener(), 
which accepts an object 
TaskListener. 

Listing 1 shows com.sun 
.source.util.Plugin, which 
uses the getName() and call() 
methods. Listing 2 shows 
some methods available in 
com.sun.source, util.JavacTask, 
and Listing 3 shows the 
methods available in com 
.sun.source, util.TaskListener. 

But there are obvious 
questions that remain unan¬ 
swered, for example, how do 
you start writing the com¬ 
piler plug-in and how do you 
run it? 

Let's Build a Compiler 
Plug-In 

The first step is to download 
and build the current release 
of the Java 8 compiler, which 
supports compiler plug-ins. 
Toward this end, download 
the latest version and fol- 
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low the build instructions in the 
README file. 

Once the compiler is built, 
include the generated dist/lib/ 
classes.jarfile in your project. 
Alternatively, you can download 
a ready-made binary from 
jdk8.java.net. 

Next, there are several steps we 
need to follow to build our plug-in. 
Here is a summary of the steps: 

1. Implement the com.sun 
.source.util.Plugin interface 
shown in Listing 1. 

2. Add a TaskListenerto perform 
additional behavior after the 
type-checking phase. 

3. Create an abstract syntax tree 
(AST) visitor to locate binary 
expressions: 

a. Evaluate whether the left side 
is a method call expression 
with a receiver's 
type that is a sub- 
type of java.util.Map. 

b. Evaluate whether 
the right side is a 
null expression. 

Step 1: Implement the 
com.sun.source.util 
.Plugin interface. The 
first step is to create the 
main class, which imple¬ 
ments com.sun.source 
.util.Plugin. We return the 
name of our plug-in via 
thegetNameQ method, 
as shown in Listing4. 


Step 2: Add a TaskListener. We 

are looking for a code pattern that 
checks whether the receiver of 
the method call get() is a subtype 
of java.util.Map. To get the type 
of the receiver, we need informa¬ 
tion about the types of expres¬ 
sions that are resolved during the 
type-checking phase. We therefore 
need to insert a new phase after 
type checking. Toward this end, 
we first create a TaskListener and 
add it to the current JavacTask, as 
shown in Listing 5. 

We now need to create the class 
CodePatternTaskListener, which 
implements a TaskListener. A 
TaskListener has two methods, 
startedQ and finished(), which are 
called, respectively, before and 
after certain events. These events 
are encapsulated in a TaskEvent 

object. In our case, all we 
need to do is implement 
the finished() method 
and check for an event 
mentioning the Analyze 
phase (type checking), as 
shown in Listing6. 

Step 3: Create the AST 
visitor. Next, we need to 
write the logic to locate 
the code pattern and 
report it. How do we do 
that? Thankfully, a task 
event provides us with 
a CompilationUnitTree, 
which represents the cur¬ 


JUST PLUG IN 


Plug-ins are 
flexible, have 
a simple 
interface, can 

run at various 
points in the 
compilation 
pipe ine, and are 
specific to javac. 
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public interface Plugin { 
public String getNameQ; 

public void call(JavacTasktask, String[] pluginArgs); 

} 
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rent source file analyzed in a tree 
structure. It can be accessed with 

the getCompilationUnit() method. 

Our code will need to traverse 
this tree, locate a binary node, 
and evaluate the node's left and 
right children. This sounds like a 
visitor pattern job. The Compiler 
Tree API provides us with a ready¬ 
made visitor class designed for 
such tasks: com.sun.source.util 
.TreeScanner<R, P>. It visits all the 
nodes in the AST. 

First, we initialize our visi¬ 
tor object and then visit the 


CompilationUnitTree:, as shown in 

Listing 7. 

All we have left to do is to over¬ 
ride visitBinary(BinaryTree node, 

P p) and write the logic to verify 
the code pattern. The full code 
of the visitor class with inlined 
comments is provided in Listings 
8a-8d 

Let's Run Our Compiler Plug-In 

We are almost finished. The final 
step is to set up a file called 

com.sun.source.util.Plugin located 
in META-INF/services/. This file 
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must contain the name of our 
plug-in, CodePattemPlugin, which 
allows javac to load the appropriate 
plug-in. 

Next, using your favorite IDE or 
the command line, create a Java 
archive (JAR) file from your project 
containing the META-INF directory 
and compiled class files: 

I S jar -cvf codePatternPlugin.jar 
META-INF *.class 

Finally, you can run the plug-in 
as shown in Listing9, where 

■ -processorpath indicates the 
path where the plug-in JAR file 
is located 

■ -Xplugin indicates the name 
of the plug-in to run, which is 
CodePatternPlugin, in this case 

Conclusion 

The new plug-in mechanism pro¬ 
vides a simple hook to javac. You 
can use it to extend javac with 
new behavior. In addition, you 
can distribute a plug-in with¬ 
out making modifications to the 
javac code base. In this article, 
we showed how you can use this 
mechanism to easily write a cus¬ 
tomized source code analysis tool 
foryour applications. </article> 

/ LEARN MORE 
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LISTING 9 


if(taskEvent.getKind().equals(TaskEvent. Kind.ANALYZE)) 

{ 

CompilationllnitTree compilationUnit = 
taskEvent.getCompilationUnit(); 

newCodePatternTreeVisitor().scan(compilationUnit, null); 

} 
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GREG LUCK 


The New javax.cache 
Caching Standard 

Learn how to use javax.cache. 



T he javax.cache standard 
being developed by 
JSR107 aims to standardize 
the use of caching in java. 
Why? Open source caching 
projects and commercial 
caching vendors have been 
available for more than a 
decade. The distributed kind, 
which is often called a dis¬ 
tributed cache, has entered 
wide adoption. While each 
vendor uses a very similar 
map-like API for basic stor¬ 
age and retrieval, each ven¬ 
dor uses its own API. 

At present, developers will 
incur a significant coding 
cost in changing from one 
proprietary implementation 
to another. Itis also chal¬ 
lenging for independent 
software vendors (ISVs) to 
introduce pluggable caching 
to support multiple imple¬ 
mentations. Like develop¬ 
ers, ISVs either create their 


own service provider inter¬ 
face orthey support just a 
few implementations—a 
situation that isn't great 
for anyone. Other areas of 
java, such as jDBC, the java 
Persistence API (jPA), and 
java Message Service (JMS), 
have solved this problem 
through standards. 

Indeed, the analyst firm 
Gartner recently reported that 
the lack of a standard in this 
area was the single biggest 
inhibitor to mass adoption of 
data grids. At the time of this 
writing, jSR 107 was in Early 
Draft review and expected to 
reach final approval toward 
the end of 2012. 

The code listings in this 
article work with the Early 
Draft version of the API (0.5). 

About Caching 

While caching seems like 
a simple topic, there are 


subtleties. A cache 
is a place where you 
put a copy of data 
that is intended 
to be used mul¬ 
tiple times. Caching 
implementations, 
being in memory, 
are much fasterthan 
the original source of 
the content. This means you 
get a performance benefit 
from using a cache instead of 
the original source. You also 
offload the resource that the 
original data came from. 

To be effective, data needs 
to be used multiple times. 
There is no value in caching 
data that is written once and 
never read or read only once. 
The efficiency of the cache 
can be measured by the hit 
ratio, which is defined as 
cache hits/cache requests. 

To provide the maximum 
offload, caches need to be 


distributed so that 
the work performed 
by one application 
server gives ben¬ 
efit to the others 
and eliminates any 
duplicate requests 
forthe same data 
to the underlying 
resource. 

Finally, the affordability 
of servers with memory 
capacities of 1TB and higher, 
combined with vendor inno¬ 
vation to utilize that memory 
for cache storage, resulted 
in a new trend in which the 
cache has increased opera¬ 
tional significance. Instead 
of caching just part of a 
data set, the entire data 
set is placed in cache and 
is used as an authoritative 
source of information—the 
cache, in essence, becomes 
the operational store for 
the application. In this use 


While caching 
seems like a 
simple topic. 

there are 
subtleties. 
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case, the cache is often referred to 
as a data grid. 

Each of these areas has require¬ 
ments that the standard must 
deal with. 

Who Is Adopting javax.cache? 

At the time of this writing, JSR107 
is planned to be included in Java 
EE 7 and developed by JSR 342. 

Java EE 7 is due to be finalized in 
2013. In the meantime, javax.cache 
will work in Java SE 6 and higher 
and in Java EE 6 environments as 
well as with Spring and other pop¬ 
ular envi ronments. 

The following vendors are either 
active members of the Expert 
Group or have expressed interest 
in implementingthe specification: 

■ Terracotta (Ehcache) 

■ Oracle (Oracle Coherence) 

■ JBoss (Infinispan) 

■ IBM (ExtremeScale) 

■ SpringSource (Gemfire) 

■ GridGain 

■ TMax 

■ Fujitsu (Interstage XTP) 
Terracotta, Oracle, and JBoss are 

all planning releases upon finaliza¬ 
tion of the spec. In addition, Spring 
plans to support JSR 107 closerto 
its final release. 

Main Features 

From a design point of view, the 
basic concept is a CacheManager 
that holds and controls a collec¬ 


tion of Cache instances that have 
entries. The API can be thought 
of as maplike with the following 
additional features: 

■ Atomic operations, similar to 
java. util. ConcurrentMap 

■ Read-through caching 

■ Write-through caching 

■ Cache event listeners 

■ Statistics 

■ Transactions including all isola¬ 
tion levels 

■ Caching annotations 

■ Generic caches that hold a 
defined key and value type 

■ Support for storage by reference 
(applicable to on-heap caches 
only) and storage by value 

Optional Features 

Rather than split the specification 
into a number of editions targeted 
at different user constituencies, 
such asjava SE orSpring and 
Java EE, we have taken a different 
approach. 

First, for Java SE-style caching, 
there are no dependencies. And 
for Spring and Java EE, where you 
might want to use annotations and 
transactions, the dependencies will 
be satisfied by those frameworks. 

Second, we have a capabilities 
API via Service Provider 
.isSupported (Optional Feature 
feature) so you can determine at 
runtime the capabilities of the 
implementation.Optional features 
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<dependency> 

<groupId >javax.cache< / groupld > 
<artifactld>cache-api</artifactld> 
eversion >0.5</version > 
</dependency> 
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include the following: 

■ storeByReference (storeByValue is 

the default) 

■ Transactions 

■ Annotations 

This makes it possible for an 
implementation to support the 
specification without necessarily 
supporting all the features, and it 
allows end users and frameworks 
to discover the features so they 
can dynamically configure appro¬ 
priate usage. 

Good for Simple Caches to 
Data Grids 

While the specification does not 
mandate a particular distributed 
topology, it is cognizant of the fact 
that data storage might be distrib¬ 
uted. We have one API that cov¬ 
ers both usages but is sensitive to 
distributed concerns. We do not 
have high-network-cost maplike 
methods, such as keySetQ and 
valuesQ. And we generally prefer 


zero or low-cost return types. So 
while Map has V put(K key, V value), 
javax.cache.Cache has void put(K 
key, V value). 

Class Loading 

Caches contain data shared by 
multiple threads, which might 
themselves be running in dif¬ 
ferent container applications or 
Open Services Gateway initiative 
(OSGi) bundles within one Java 
Virtual Machine (JVM) and might 
be distributed across multiple 
JVMs in a cluster. This makes class 
loading tricky. 

We have addressed this problem. 
When a CacheManager is created, 
a class loader can be specified. If 
none is specified, the implementa¬ 
tion provides a default. In either 
case, object deserialization will 
use the CacheManager instance's 
class loader. 

This is a big improvement over 
the approach taken by caches 
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such as Ehcache that use a fall¬ 
back approach. With a fall-back 
approach, first, the thread's con¬ 
text class loader is used, and if that 
fails, another class loaderis tried. 
This can be made to work in most 
scenarios but is a bit hit-and- 
miss and varies considerably by 
implementation. 

Getting the Code 

The spec is in Maven central. The 
Maven snippet is shown in Listing 1. 

A Cook's Tour of the API: 
Creating a CacheManager 

We support the Java 6 java.util 
.ServiceLoader creational approach, 
which will automatically detect 
a cache implementation inyour 
classpath. You 
then create a 
CacheManager 
with the code 
shown in 
Listing 2, 
which returns 
a singleton 
CacheManager 
called Wdefault_. 
Subsequent calls 
return the same 
CacheManager. 

CacheManager 
instances can 
have names and 
class loaders 
configured, for 


example, as shown in Listing3. 
Implementations can also sup¬ 
port direct creation with new for 
maximum flexibility, as shown in 

Listing 4. 

Or, to do the same thing without 
adding a compile-time depen¬ 
dency on any particularimple- 
mentation, use the code shown in 

Listing 5 

We expect implementations to 
have their own well-known config¬ 
uration files, which will be used to 
configure the CacheManager. The 
name of the CacheManager can be 
used to distinguish the configura¬ 
tion file. For Ehcache, this will be 
the familiar ehcache.xml placed 
at the root of the classpath with a 
hyphenated prefix for the name of 
the CacheManager. So, the default 
CacheManager will simply be 
ehcache.xml and myCacheManager 
will be appl-ehcache.xml. 

Creating a cache. The API supports 
programmatic creation of caches. 
This complements the usual con¬ 
vention of configuring caches 
declaratively, which is left to each 
vendor. 

To programmatically configure 
a cache named testCache, which is 
set for read-through, use the code 
shown in Listing6. 

Getting a reference to a cache. You 
get caches from the CacheManager. 
To get a cache called testCache, use 
the code shown in Listing 7. 


CACHE THIS 


The API 
supports 
programmatic 
creation of 
caches. This 
complements the 
usual convention 
of configuring 
caches 
declaratively. 
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Cache<Integer, Date> cache = cacheManager.getCache("testCache"); 
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Basic cache operations. To put 

data in a cache, use the code 
shown in Listing 8 . To get data 
from a cache, use the code shown 
in Listing 9. To remove data from 
a cache, use the code shown in 
Listing 10. 

Annotations 

JSR107 introduces a standardized 
set of caching annotations, which 
perform method-level caching 
interception on annotated classes 
runningin dependency injection 
containers. Caching annotations 
are becoming increasingly popular, 
starting with E_hcache Annotations 
for Spring, which influenced 
Spring 3's caching annotations. 
Spring plans on supportingthe 
new standard annotations in addi¬ 
tion to its own. 

The JSR 107 annotations cover 
the most-common cache opera¬ 
tions, includingthefollowing: 


■ @CacheResult —Use the cache. 

■ @CachePut— Put into the cache. 

■ @CacheRemoveEntry —Remove a 
single entry from the cache. 

■ @CacheRemoveAII —Remove all 
entries from the cache. 

When the required cache name, 
key, and value can be input, they 
are not required. Seethejavadoc 
forthe details. To allow greater 
control, you can specify all these 
operations and more. 

In the example shown in 
Listing 11, the cacheName attribute 
is specified to be domainCache, 
index is specified as the key, and 
domain is specified as the value. 

The Reference Implementation 
includes an implementation for 
Guice, Spring, and Contexts and 
Dependency Injection (CDI). CDI is 
the standardized container-driven 
injection introduced in Java EE 6. 
The implementation is nicely 
modularized for reuse and uses 




f 




java 

.net 


blog 









































//java architect / 


an Apache license; therefore, we 
expect several open source caches 
to reuse the implementation. 
Annotation example. The example 
in Listing 12 shows how to use 
annotations to keep a cache in 
sync with an underlying data 
structure, in this case a blog man¬ 
ager, and also how to use the 
cache to speed up responses, done 
with @CacheResult. 

Wiring up Spring. For Spring, the 
key is the configuration line shown 
in Listing 13, which adds the cach¬ 
ing annotation interceptors into 
the Spring context. Listing 14 
shows a full example. 

Spring has its own caching 
annotations based on earlierwork 
from JSR107 contributor Eric 
Dalquist. Those annotations and 
JSR 107 will happily coexist. 

Wiring up CDI. First, create an 
implementation of javax.cache 
.annotation.BeanProvider and then 
instruct CDI where to find it by 
declaring a resource named javax 
.cache.annotation. Bean Provider 
in the classpath at /META-INF/ 
services/. 

Foran example usingthe Weld 
implementation of CDI, refer to 
the CdiBeanProviderin our CDI 
test harness. 

Conclusion 

The javax.cache specification stan¬ 
dardizes a long-overdue area of 


LISTING 13 


LISTING 14 


public class BlogManager { 

@CacheResult(cacheName="blogManager") 
public Blog getBlogEntry(String title) {...} 

@CacheRemoveEntry(cacheName="blogManager") 
public void removeBlogEntry(String title) {...} 

@CacheRemoveAII(cacheName="blogManager") 
public void removeAIIBIogs() {...} 

@CachePut(cacheName="blogManager") 
public void createEntry(@CacheKeyParam String title, 
@CacheValue Blog blog) {...} 

@CacheResult(cacheName="blogManager") 
public Blog getEntryCached(String randomArg, 
@CacheKeyParam String title){...} 
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Java. A rich variety of commercial 
and open source implementa¬ 
tions will be available, which 
should ensure very broad adop¬ 
tion. The standard accommo¬ 
dates simple in-process caches 
but will also provide the primary 
API for storage into and retrieval 
from data grids. 

Those with a need to use a cache 
or a data grid should look to adopt 
the specification upon its release 
to avoid vendor lock-in. Because 
the standard works with Java SE, 


Java EE 6 and 7, and otherframe- 
works such as Guice and Spring, 
enterprises should consider using 
it for future projects. </article> 
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Secure Java EE Authentication 

Implement login authentication using declarative and programmatic security. 


1 av a EE security is easy, 

J powerful, extensible, and 
sufficient for the vast major¬ 
ity of all use cases. This 
article discusses RESTful 
services secured with stan¬ 
dard java EE capabilities, and 
it demonstrates a domain- 
specific extension imple¬ 
mented with Contexts and 
Dependency Injection (CDI) 
and Enterprise JavaBeans 
(EJB) 3. 

Instead of covering all 
authorization and authen¬ 
tication aspects—which 


is impossible in a single 
article—this article focuses 
on the most-common use 
cases: login authentication 
methods with declarative 
and programmatic security. 
Note: Some relevant example 
code can be found here. 

Setting the Stage 

Forthe purposes of this 
article, we will implement a 
system that, by default, dis¬ 
plays some "wisdom"—the 
message "java Programming 
Language Rocks!"—and 


allows a chosen group of 
people called "dukes" to 
change the message. 

All HTTP-GET requests 
of the wisdom URI should 
be available to everyone, 
whereas only members of 
the dukes group should be 
able to execute the @POST 
method shown in Listing 1. 

REST resource implemen¬ 
tations are usually heavily 
dependent on thejAX-RS 
API, which encourages the 
introduction of an explicit 
managed bean responsible 
forthe message manage¬ 
ment. The WindowStorage 
bean is declaratively secured 
with @RolesAllowed annota¬ 
tions (see Listing 2). 

The parameterless wisdom 
method can be executed 
by anyone, but only a user 
in the dukes role is allowed 
to change wisdom by pass¬ 
ing a string as parameter. 

All used roles have to first 
be declared on the class 
level with the @DeclareRoles 


annotation. You could also 
use an XMLdeployment 
descriptor for this purpose. 
The @PermitAII annotation 
allows all users to execute an 
annotated method, and the 
@RolesAllowed annotation 
restricts access to the speci¬ 
fied roles. 

Authentication as Aspect 

So far, the user is not going 
to be authenticated. Without 
authentication, the current 
user is not going to be iden¬ 
tified as a Principal with its 
configured roles member¬ 
ship. In the case of GlassFish, 
a nonauthenticated useris 
associated with a Principal 
with the ANONYMOUS name. 
Fortunately, most of the 
Web frameworks, and so also 
the JAX-RS API, are Servlet- 
based. Servlets come with an 
easy way to authenticate a 
user with a single invocation 
of the method HttpServlet 
Request#authenticate. The 
entire procedure can be 
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extracted into a reusable Web 
filter, as shown in Listing 3. 

With the annotation 

@WebFilter("/*"), the filter inter¬ 
cepts all requests. The crux of the 
Authenticator filter is the invoca¬ 
tion of the authenticate method. 

Where Annotations End and 
XML Starts 

In the old Java EE tradition, no 
single XML line has been written 
so far. Unfortunately, we will have 
to specify a few lines in web.xml 
(see Listing 4) to configure which 
authentication method will be 
used and from which realm the 
authentication and authorization 
information is fetched. 

The error-page section is needed 
only to display for the user a nicer 
message than an "Internal Server 
Error 500" message. Because of 
its flexibility, form-based login 
configuration is the most popular. 
To pass the username and pass¬ 
word to the system, you only have 
to use j_security_check as a name 
of the action and j_username and 
j_password to pass the username 
and password, respectively. In our 
example, the form is implemented 
as a static HTML page, as shown in 
Listing 5. 

Of course, you could equally 
well pass the information directly 
with the POST call programmati¬ 
cally. You are not limited to using 


a static HTML page to perform the 
authentication. 

What Is file? 

Within the web.xml deployment 
descriptor, a realm with the name 
file is referenced. A realm is a user 
repository containing the secu¬ 
rity credentials as well as the roles 
membership. A concrete realm 
realization is not specified by the 
Java EE specification. Usually, 
application servers tend to support 
file, database, and LDAP realms out 
of the box, and they support a large 
number of extensions to cover a 
wide variety of legacy resources. For 
demo purposes, we'll later create 
a file realm with the name file and 
a user with the name james and 
membership to the dukes role. 

As an enterprise developer, 
you cannot fully rely on concrete 
names existing in the production 
repository. Instead of hardcoding 
volatile role names into your code, 
you can use Active role names and 
map them to the actual ones in 
the deployment descriptor. 

Logical roles that come with the 
application are called groups. The 
Java EE spec foresees the mapping 
of roles to groups in the deploy¬ 
ment descriptor. Of course, such 
a decoupling works only in cases 
where roles and groups with dif¬ 
ferent names are semantically 
equivalent. If you can influence 
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(©Stateless 

@Path("wisdom") 

<©Produces(" text/plain") // MediaType.TEXT_PLAIN 
public class WisdomResource { 

(©Inject 

Wisdom Storage storage; 

(©GET 

public String wisdom() { 
return storage.wisdom(); 

} 

(©POST 

@Consumes(MediaType.APPLICATION_FORM_URLENCODED) 

@Produces(MediaType.TEXT_HTML) 

public String wisdom( 

(©FormParam("wisdom") String wisdom) { 
storage.wisdom(wisdom); 
return "thanks!"; 

} 

} 
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the actual role naming in the 
target realm, you can also con¬ 
ventionally use the roles as groups 
and omit the mapping. In the case 


of GlassFish, an automatic role- 
to-group mapping can be speci¬ 
fied directly in the security realm 
configuration. 
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Who Is Responsible for the 
401 Error? 

The error-page section in web.xml 

specifies a redirect to an unau¬ 
thorized .html page upon any 
occurrence of the HTTP 401 error. 
Although such a centralized re¬ 
direct is useful and nice, the HTTP 
401 error will never happen in our 
sample code. 

Every serious blogger would love 
to change the "Java Programming 
Language Rocks!" wisdom to 
something like "Java Is the New 
COBOL!" Any attempt to do so 
would result in error 500 with out¬ 
put like the following, but it would 
never result in error 401: 

javax.servlet.ServletException: 
javax.ejb.AccessLocalException: 
Client not authorized for this 
invocation 

Fortunately, JAX-RS comes with 
a clean way to map any exceptions 
into sensible HTTP error codes. The 

AccessLocalExceptionMapper class 
is responsible for the conversion 
of a ny AccessLoca I Exception i nto 
the 401 error code. On each occur¬ 
rence of AccessLoca I Exception, the 
active user is also logged out (see 
Listing 6). 

Beyond marking the 
ExceptionMapper implementation 
with the (©Provider annotation, no 
further configuration is needed. An 


ExceptionMapper implementation 
will be automatically discovered 
and activated. 

When Declarative Is 
Not Enough 

So far, all role names were bound 
to the methods declaratively. Every 
declaration change requires a full 
recompilation and redeployment. 
Instead of hardcodingthe role 
names in the annotations, they 
can be accessed programmatically. 
With an injected SessionContext, 
the role membership can be 
verified at runtime with the 
SessionContext#isCallerInRole invo¬ 
cation. The Principal instance rep¬ 
resenting the current user can be 
di rectly i njected i nto a ny ma naged 
bean that allows implementation 
of a finer-grained authorization, as 
shown in Listing 7 
In contrast to the declarative 
approach, the role can be chosen 
at runtime from the set of declared 
roles and changed without recom¬ 
pilation. However, the permission 
management has to be directly 
performed in the security realm 
and might be hard to implement 
in the real world. 

Producing More Flexibility 
on the Fly 

The Principal name is usually a 
username, which in turn is used 
as user identification. Because 
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LISTING 6 LISTING 7 


(©Provider 

public class AccessLocalExceptionMapperimplements 
ExceptionMapper<AccessLocalException> { 

(©Context HttpServletRequest request; 

(©Override 

public Response toResponse(AccessLocalException exception) { 
try { 

request.logout(); 

} catch (ServletException ex) { 

} 

return Response.status(Response.Status.UNAUTHORIZED).build(); 

} 

} 
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ofthe unique user identification 
requirement, the username can 
also be used as a unique identifier. 
Any arbitrary information from a 
custom permission store can be 
associated with the username, 


fetched from a custom realm 
implementation, and evaluated 
at runtime. Usually, the additional 
security information is closely 
related to the target domain. There 
is no significant domain complex- 
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ity in our example, so we will use 
only generic permissions: 

I public enum Permission { 

READ, WRITE, EXECUTE; 

} 

In the real world, you can attach 
to a Principal whatever is beneficial 
for the realization of your require¬ 
ments—it doesn't have to be a 
Permission. It can be any flat or 
hierarchical data structure. Usually 
the custom permissions are going 
to be maintained in a persistent 
store separately. For demonstra¬ 
tion purposes, the Permission 
instances are maintained in an 
in-memory custom realm imple¬ 
mented as a singleton EJB bean, as 
shown in Listing 8. 

In the real world, 
you could extend the 
InMemoryPermissionsRealm to 

access the per¬ 
sistent store 
and cache the 
results. For 
reasons of con¬ 
venience, the 
generic set of 
Permissions is 
wrapped with a 
more meaning¬ 
ful class rep¬ 
resenting the 
user, as shown in 
Listing 9. 


A user populated with a cus¬ 
tom set of permissions needs to 
be conveniently exposed to the 
application code in orderto be 
useful. Forthe population of the 
user instance with the externally 
stored permissions, the name 
of the currently active user is 
needed. The class UserProvider 
uses the username stored in 
the injected Principal instance 
to instantiate a User with the 
Permission instances from the 
InMemoryPermissionsRealm (see 
Listing 10). 

Now a user instance with cus¬ 
tom permissions can be conve¬ 
niently injected into any java EE 
component: 

I public class SomeComponent { 
@Inject 

UsercurrentUser; 

} 

Declarative Authorization with 
Even More Aspects 

Although a User instance popu¬ 
lated with custom permissions 
can be injected to all instances 
participating in the call stack, the 
handlingis still insufficiently con¬ 
venient. You would have to ask 
the User for authorization each 
timeyou are planningtoinvoke 
a guarded method. Flowever, 
authentication and authorization 
are one of the few killer use cases 


KILLER USE CASE 


Authentication 
and authorization 
are one of the 
few killer use 
cases that can 
be solved with 
aspects. 
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LISTING 12 


@Singleton 

@ConcurrencyManagement(ConcurrencyManagementType.BEAN) 
public class InMemoryPermissionsRealm { 


private Map<String,EnumSet<Permission>> customStore; 


@PostConstruct 
public void populateRealm(){ 
this.customStore = 

new FlashMap<String, EnumSet<Permission>>(); 

this.customStore.put("james", 
EnumSet.allOf(Permission.class)); 

this.customStore. put("blogger", 
EnumSet.noneOf(Permission.class)); 

} 

public EnumSet<Permission> getPermissionForPrincipal( 
String userName){ 

EnumSet<Permission> configuredPermissions = 
this.customStore.get(userName); 
if(configuredPermissions != null) { 
return configuredPermissions; 

} 

else { 

return EnumSet.noneOf(Permission.class); 

} 

} 

} 
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that can be solved with aspects. 
Instead of repeatedly asking the 
User for permission, a guarded 
method can be denoted with a 
plain annotation, as shown in 
Listing 11. 


The AllowedTo annotation car¬ 
ries a Permission array and can be 
directly applied on business meth¬ 
ods (see Listing 12). The actual 
checks were factored out into an 
interceptor, which compares the 




































//enterprise java/ 


value of the Permission annotation 
with the permissions of the active 
user, as shown in Listing 13. 

An interceptor has access not 
only to the methods but also 
to all parameters. In addition, 
the User is injectable to java EE 
components. With custom per¬ 
missions and direct access to 
the business logic, 
instance-based autho¬ 
rization can be eas¬ 
ily realized. Usually, 
the challenges are 
not java EE limita¬ 
tions, but rather a deep 
understanding of the 
target domain. While 
it is straightforward 
to give only specified 
users permission to 
access particular rows 
in the table, it is signifi¬ 
cantly hardertofind an 
elegant abstraction in 
practice. 

The Very Last Aspect 

All attempts to access a 
guarded method with¬ 
out a valid permission result in a 
SecurityException, which will again 
cause an ugly "Internal Server 
Error 500" message. We could 
throw an AccessLoca I Exception to 
reuse the already implemented 
AccessLoca I ExceptionMapper, but 
it would unnecessarily tighten 


the generic Guard to the EJB API. 

An additional ExceptionMapper 

implementation converts any 
SecurityException into an HTTP 401 
error code and logs out the user, as 
shown in Listing 14. 

The SecurityExceptionMapper 
class is a 1:1 copy of 
AccessLocalExceptionMapper, but 
it is still a slightly better 
solution than introduc¬ 
ing a dependency on 
the EJB API. AJAX-RS 
ExceptionMapper is 
a great way to re¬ 
duce the exception- 
handling plumbing 
inside the resource 
classes. Alternatively, 
a redirect to the unau¬ 
thorized page could 
also be specified in the 
web.xm file based on 
the exception type, not 
on a status code (see 
Listing 15). 

What's Left 

Java EE 6 authoriza¬ 
tion and authentica¬ 
tion comes with surprising power 
and flexibility. The vast majority 
of mainstream use cases can be 
solved efficiently out of the box 
without any extensions or librar¬ 
ies. However, third-party frame¬ 
works such as OpenAM, JBoss SSO, 
or Apache Shiro come with custom 


I 


STRONG COMBO 


The combination 
of built-in 
security with 
CDI and Servlet 
API capabilities 
allows a portable 
implementation 
of custom 
authorization 
schemes with only 
a few lines of code. 
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public class Guard { 


@Inject 

Instance<User> users; 

@AroundInvoke 

public Object validatePermissions( 
InvocationContextic) throws Exception! 

Method method = ic.getMethod(); 

User user = users.get(); 
if(!isAllowed(method, user)){ 
throw new SecurityException("User" + user + " is" 
+ "not allowed to execute the method " + method); 

} 

return ic.proceedQ; 

} 

boolean isAllowed(Method method,User u) { 
AllowedTo annotation = method.getAnnotation( 
AllowedTo.class); 
if(annotation == null) { 
return true; 

} 

Permission^ permissions = annotation.valueQ; 
for (Permission permission : permissions) { 
if(u.isAI lowed (permission))! 
return true; 

} 

} 

return false; 

} 
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realm implementations that offer 
connectivity to a variety of stores 
and APIs. The form-based authen¬ 
tication discussed here is the most 
popular, but it is not the only one 
available. Also, the insecure Basic, 
the slightly more secure Digest, 
and the secure but harder-to- 
deploy Certificate authentications 
are available but less common 
in practice. In particular, RESTful 
interfaces are heavily based on 
URIs and can be conveniently 
secured by restricting accessibility 
to a certain URI and method with 
the web-resource-collection tag in 
web.xml. 

Conclusion 

The combination of built-in 
security with CDIand Servlet API 
capabilities allows a portable 
implementation of custom autho¬ 
rization schemes with only a few 
lines of code. Even the way the 
application server resolves the 
roles and principals and enforces 
the rules is specified with the 
Java Authorization Contract for 

Containers (JACC) specification. 
JACC has been part of Java EE since 
J2EE1.4and has to beimple- 
mented by every certified applica¬ 
tion server. 

You could completely change 
authentication and authoriza¬ 
tion with the implementation of 
the interface javax.security.jacc 


.PolicyConfiguration (14 methods) 
and the abstract class javax 

.security.jacc. PolicyConfiguration 

Factory (3 methods). Custom JACC 
implementations are often used to 
plug external authentication and 
authorization products in a por¬ 
table way. </article> 
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Integrating Web and Java Client 
Applications with Social Media 


Learn how to integrate your application with existing social network systems. 


< 
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PHOTOGRAPH BY 
TON HENDRIKS 


T oday, many IT projects 
need to integrate with 
social media, for example, 
Facebook and Twitter. 
Buttons with text such as 
"Log in via Twitter" or "Post 
to Facebook" are everywhere 


on the Web and beyond. 
While social media often 
present themselves as 
easy-to-use services to the 
end user, a deep integra¬ 
tion at the API level requires 
consideration. 


In this article, we show 
how you can easily integrate 
your Web and java client 
applications with existing 
social media. 

Social Media 

There are a number of rea¬ 
sons why a Web or client 
application might benefit 
from integrating with exist¬ 
ing social media: 

■ End users don't need to 
maintain additional cre¬ 
dentials. Instead they 
can login usingtheir 
Facebook/Twitter creden¬ 
tials. It is a big hurdle when 
people have to create yet 
another account with yet 
another password for a 
new service. 

■ The "viral" aspect: Social 
media is about networking. 
People see what their peers 
are doing, and they might 
want to do the same. 


■ User information: Appli¬ 
cations can benefit from 
additional userinforma- 
tion that is already avail¬ 
able in the user's profile on 
social media. Applications 
don't have to ask for this 
information—although 
the social network will ask 
users if they want to share 
this information with the 
application. 

The level of integration 
varies among applications 
from easy to more challeng¬ 
ing and might be described 
as follows: 

■ Public information, using 
anonymous access 

■ Authentication 

■ Read 

■ Write 

Anonymous Access 

Most social media provide 
limited, anonymous access 
to some services. As such, 
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integration with a social network is 
no different from integration with 
any other external Web service. Via 
a cURLcommand, the informa¬ 
tion can easily be retrieved using 
command-line requests, as shown 
in Listing 1. 

The first call will retrieve tweets 
that are tagged with java and 
return the result in JSON for¬ 
mat. The second call will return 
the public part of the profile of 
the Java Champions group on 
Facebook. A very basic Java pro¬ 
gram can be used to query Twitter 
and Facebook in order to retrieve 
information that is accessible 
without authentication, as shown 
in Listing2. 

Authentication 

Typically, information that is avail¬ 
able without a user having to log 
in on a Website is also available 
via an anonymous, nonauthenti- 
cated API call. Thus, this informa¬ 
tion can be retrieved easily by Java 
applications. It should be noted, 
though, that most social media 
sites impose volume restrictions. 
Forexample, you can make only 
2,000 API calls per day oryou can 
track only 10 users simultaneously. 

Private—and often more inter¬ 
esting-information is accessible 
only by using authentication that 
involves three parties: 

■ The social network 


■ Your application 

■ The end user 

Authenticated access to 

resources might seem more com¬ 
plex, but it comes with a number 
of benefits. The application knows 
the end user and has access to 
interesting information that can be 
valuable forits own purposes. To 
access user-specific information, 
the social network often requires 
that your application does this on 
behalf of the user. Typically, 

OAuth 1, OAuth 2, or a similar pro¬ 
tocol is used for this. It is beyond 
the scope of this article to explain 
OAuth in depth. Interested readers 
can refer to the specification docu¬ 
ment for OAuth 1 and to the draft 
version of OAuth 2. 

In general, an application is 
allowed to make private calls only 
when the end user allowed it (see 
Figure 1). This explains messages 
such as "this application wants to 
post on yourtimeline" and "this 
application wants to read your 
e-mail." 

Ratherthan askingthe userfor 
permission for every single call, 
the application is often granted 
one user access token per user 
by a specific social network. All 
requests that the application 
makes on behalf of a specific user 
are then signed using that token. 
The social network then verifies 
whether the token provided by the 


ORACLE.COM/JAVAMAGAZINE ////////////////////////////////// JANUARY/FEBRUARY 2013 


A 


LISTING 1 LISTING 2 


curl 

"http://api.twitter.com/I/users/lookup.json?screen_name=java" 
curl "http://graph.facebook.com/JavaChampions" 
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application grants sufficient access 
rights to the requested resource, 
for example, to read the social 
graph or to post tweets. 

Obtaining a user access token 
is a multistep process, which is 
described here for OAuth 1.0. In 


a browser application, users are 
redirected to a login page at the 
social network where they grant or 
deny permissions. The social net¬ 
work and the application commu¬ 
nicate via a multiphase protocol, 
and the end result is the applica- 
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tion obtaining a user access token. 
Users are then redirected from the 
application to the social network 
and back. Schematically, this is 
shown in Figure 2. 

Before an application can 
request that users authenticate 
themselves with social media, the 
application needs to be registered 
with the social network. Every 
social network has its own registra¬ 
tion process, but the following are 
a number of common concepts: 

■ The application needs to provide 
a callback URL that will be called 
by the social network upon suc¬ 
cessful authentication. 

■ The application is granted a 
consumerKey and a consumer 
Secret or a public key and a pri¬ 
vate key; terminologies tend to 
vary between different social 
media. This key combination is 
used when signing requests. 


DaliCore 

DaliCore is an open source 
project that adds the concepts of 
user, content, group, and permis¬ 
sion on top of the Java EE 6 speci¬ 
fication. The goal of DaliCore is to 
make it easierto develop appli¬ 
cations that involve users and 
content, organize them in groups, 
and assign and check permis¬ 
sions. A high-level overview of 
the DaliCore architecture is 
shown in Figure 3. 

DaliCore defines the concept of a 
user in the class com.lodgon.dali 
.core.entity.User. Operations on the 
user concept are defined in the 
stateless session bean com.lodgon 
.dali.core.ejb.UserBean. 

The DaliCore project contains 
a module DaliCoreSocial, which is 
particularly useful in facilitating 
the above-mentioned process of 
obtaining user access tokens for 
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Figure 3 


different social media. By 
using DaliCoreSocial, an 

application developer is 
shielded from the rather 
complex flow that is 
required for authenticat¬ 
ing a user with a social 
network. 

A user of a social net¬ 
work corresponds to an 
instance of com.lodgon 
.dali.core.social.entity 
.OnlineAccount. A single 
user can be linked to zero 
or more OnlineAccount 
instances (for example, 
an OnlineAccount for 
Facebook and an OnlineAccount 
for Twitter). 

The business functionality pro¬ 
vided by DaliCoreSocial is available 
in the stateless session bean com 
.lodgon.dali.core.social.ejb 
.SocialBean. This session bean 
contains functionality for fi nding 
which OnlineAccount instances 
are coupled with a particular User 
instance, for example: 

■ findOnlineAccount 

■ findOnlineAccountByUser 
Also, DaliCoreSocial provides 

functionality that applications can 
use to retrieve information from 
a social network or to push infor¬ 
mation to a social network, for 
example: 

■ getFriends 

■ getStatus 


■ getStream 

■ postStatus 

In orderto couple an 
OnlineAccount to a User or create 
a new User with an OnlineAccount, 

the end user needs to connect with 
a social network. As mentioned 
before, an application needs to reg¬ 
ister itself with each of the social 
media it wants to communicate 
with. The registration process is 
specific to each social network. For 
example, registering your applica¬ 
tion with Twitter requires you to log 
in at http://dev.twitter.com and 
registerthe application, as shown 
in Figure4. 

After registering successfully 
with a social network, the applica¬ 
tion is granted a key and a secret. 
DaliCoreSocial requires these keys 
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Figure 4 


to be available in the web.xml file 
in the format shown in Listing 3. 

DaliCoreSocial can be used by 
Web applications as well as by 
JavaFX applications, as shown in 
Figure 5. 

If a Web application is required, 
DaliCoreSocial can easily be 
bundled with the specific Web 
application. If the application is 
a Java client application, a back¬ 
end component is still necessary, 
because most social media require 
a static callback URLto be avail¬ 
able. Upon successful authenti¬ 


cation, the social network wants 
to call a callback URL, and this 
URLshould be underthe control 
of the application. Fortunately, 
DaliCoreSocial takes care of this, 
so JavaFX developers can focus on 
their JavaFX client code. 

We will now build a very simple 
application with a Web client and 
a JavaFX client, which allows end 
users to authenticate themselves 
via Twitter or Facebook. The appli¬ 
cation will subsequently show a 
list of friends on a Web page or in 
the JavaFX application. 
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LISTING 3 


<context-param> 

<param-name>dalicore.social.facebook.consumerkey</param-name> 

< pa ra m - va I ue > 123460584819473 < / pa ra m - va I ue > 

</context-param> 

<context-param> 

< para m-name>da licore. social, facebook.consumersecret 
</param-name> 

<param-value>1234bbcble33406cbl973e9322396e69</param-value> 

</context-param> 

< context-pa ram> 

< para m-name>da licore. social. twitter.consumerkey</param-name> 

< pa ra m - va I ue > a bed c9ww7i VWygvgDmxm w< / pa ra m -va I ue > 
</context-param> 

<context-param> 

< para m-name>da licore. social, twitter.consumersecret 
</param-name> 

<param-value>abcdKj2k77jfZgPpwR3eyd4Sgkrm3ZnFDLaOw7VU 

</param-value> 

</context-param> 
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Application Logic 

The demo application, called 
ConnectSimple, is a Maven project. 
The dependency on DaliCoreSocial 
in the pom.xml file of the project 
guarantees the availability of the 
REST endpoint required for logging 
in to a social network. The location 
of this handler is /dalicoresocial/ 
connect{network}?callback={some_ 
page], where network} can be 
twitter, facebook, orgoogleplus. 

If a value forthe callback param¬ 
eter is specified, the user will be 
redirected to this page after suc¬ 


cessfully logging in. DaliCoreSocial 
will add to the callback function 
a query parameterthatis a com¬ 
bination of a key (uid) and a value 
(the userlD of the logged-in user). 
In case the callback value is omit¬ 
ted, the user ID forthe logged-in 
user will be returned. 

When a user connects to a 
social network for the first time 
using the above-mentioned REST 
endpoint, an OnlineAccount will be 
created. In case the user is not yet 
known, a User instance will auto¬ 
matically be created as well. The 
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Figure 5 


user corresponding to a specific 
user ID can be obtained by calling 
the following: 

I UserBean.getByllid( 

String uid); 

The friends of a specific user can 
be retrieved by calling the follow¬ 
ing method, which will return the 
friends of the user for a specific 
network: 

I SocialBean.getFriends( 

String uid, String network); 


Ourdemo application contains 
two REST handlers: 

■ Handler.java is used by the Web 
example. The responses of the 
method calls are jersey Viewable 
instances, which create HTML 
pages. 

■ API.java is used bytheJavaFX 
example. The responses of the 
method calls are in XMLorJSON 
format and can be processed 

by any client capable of doing 
XML/JSON processing. 

The functionality provided by 
both REST handlers is similar. 


Web Example 

The Web application contains a 
home.jsp file that contains three 
images: a Facebook image, a 
Twitterimage, and a Google+ 
image. Clicking one of those 
images will direct the usertothe 
start of the login flow at one of the 
following, which will then direct 
the usertothe specific social net¬ 
work login page: 

■ BASE/rest/dalicoresocial/ 
connect/facebook?callback= 
BASE/rest/demo/callback 

■ BASE/rest/dalicoresocial/ 


connect/twitter?callback=BASE/ 

rest/demo/callback 
■ BASE/rest/dalicoresocial/ 

connect/googleplus?callback= 

BASE/rest/demo/callback 

The whole authentication flow 
(including retrieval of a user access 
token) is done by DaliCoreSocial. 
When the user is authenticated 
and the social network allows our 
application to access the user 
information, an OnlineAccountis 
created and the user is redirected 
to BASE/rest/demo/callback. 

Our application contains a REST 
handlerclass named Handler.java, 
which is annotated with the 
@Path annotation to indicate that 
it listens to REST requests that 
start with "demo": 

@Path("/demo") 

@ManagedBean 

public class Handler { 

}" 

Note that the class is also anno¬ 
tated with @Man aged Bean in order 
to easily use the stateless session 
beans UserBean and SocialBean: 

I @Inject 

SocialBean socialBean; 

@Inject 

UserBean userBean; 

The callback method is anno- 
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tated with the @Path ("callback") 

annotation and will be called 
when the user is redirected to 
BASE/rest/demo/callback. This 
method is called by DaliCoreSocial 
after the social network redirects 
the user back to our application. 
DaliCoreSocial adds to the callback 
a query parameter, uid, which con¬ 
tains the unique identifier for the 
created user. The callback method 
will retrieve the user linked to the 
unique identifier by using the fol¬ 
lowing code: 

I User user = userBean.getByUid(uid); 

The OnlineAccount instances 
associated with the user are 
obtained by calling the code 
shown in Listing4. 

Both the user and the list of 
OnlineAccount instances are put 
in a Model class, which is a POjO 
that holds a user and the list of 
OnlineAccount instances. Next, a 
jersey Viewable instance is created 
by calling new Viewable("/accounts 
.jsp", model); and this Viewable 
is returned. This will cause the 
accounts.jsp Web page to be dis¬ 
played, and the information avail¬ 
able in the Model instance can 
be rendered in the Web page, as 
shown in Listing 5. 

The full code forthis example is 
downloadable here and can also 
be viewed online. 


JavaFX Example 

We will now show how a JavaFX 
application can access informa¬ 
tion in social media, leveraging 
the same principles as in the case 
of a Web application. Our JavaFX 
example contains five classes: 

■ ExternalNetworkFX is the main 
class. This class, which also con¬ 
tains the functionality for com¬ 
municating with the back end 
using REST, contains the current 
"state" of the application (for 
example, logged-in user and list 
of friends). In typical business 
applications, this functionality 
belongs to separate classes. For 
simplicity, we combined most 
of the controller and the model 
parts into a single class. 

■ ProfilePane is the class that 
describes the layout of the pane 
that is shown once the user has 
been successfully authenticated. 

■ UserDetail is the class describing 
the layout for a single user. 

■ User and Friend are two classes 
that hold data forthe current 
user and the list of friends. 

The typical flow in social 

network-based authentication 
leverages Web components. The 
application redirects the end 
userto the login page of a social 
network, and upon successful 
authentication, the social network 
redirects the end user back to 
the application. 
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List<OnlineAccount> onlineAccounts = 
social Bean.findOnlineAccountsByUser(user.getldQ); 


Download all listings in this issue as text 


JavaFX comes with a WebView 
component. We can use a 
WebView for the Web-based user 
authentication to a social network. 
Once the useris authenticated, 
we want to use instances of the 
plain JavaFX Node in orderto ren¬ 
der information, for example, a 
list of the user's friends. As a con¬ 
sequence, information about the 
logged-in user needs to be trans¬ 
ferred from the WebView to the 
other JavaFX components. We will 
build an application that allows 
this. The code forthe application 
can be downloaded here. 

First, we add three image but¬ 
tons that have the Facebook, 
Twitter, and Google+ icons. 
Clicking any of those buttons cre¬ 
ates a WebView, and the location 
of the WebEngine is set to SERVER/ 
dalicoresocial/connect/fnetwork}, 


where network is either facebook, 
twitter, or googleplus, depend¬ 
ing on which framework we want 
to connect. In our code, this is 
achieved forthe Facebook button 
using the code in Listing 6. 

FortheTwitter button and the 
Google+ button, a similar snip¬ 
pet applies. The WebView will now 
point to the Facebook login page, 
as shown in Figure6. 

After the user grants the per¬ 
missions, the social network will 
make a call to the DaliCoreSocial 
back end. DaliCoreSocial will 
continue with the OAuth flow, 
and a user access token will be 
obtained. DaliCoreSocial then 
checks whether the logged-in 
user already exists in the applica¬ 
tion and, if not, an OnlineAccount 
is created and coupled to a newly 
created User entity. 
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LISTING 9 


Node item = webEngine.getDocument().getChildNodes().item(0); 
String uid = item.getTextContent(); 
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Again, note that in case the 
authentication flow begins with a 
call to [SERVERBASE+Vconnect/ 
facebook/{uid}"], the created 
OnlineAccount will be coupled to 
the existing user with the cor¬ 
responding uid, which is a UUID. 
Because no callback was specified 
in the initial call, DaliCoreSocial 
will respond to the client with the 
UUID of the logged-in user. 

In the JavaFX application, we 
want to be notified when the loca¬ 
tion of the WebEngine starts with 
the callback URL of our applica¬ 
tion. After successful authen¬ 
tication, the social network will 
redirect ourWebView to call the 
callback URL of DaliCoreSocial and, 
in our case, DaliCoreSocial will 


put the UUID of the userin the 
response object. We can read this 
UUID by parsingthe Document 
Object Model (DOM) in the result 
page, as shown in Listing7. 

The obtained uid is an identifier 
for the logged-in user, 
and we can now start 
working with it. For exam¬ 
ple, the friends of a user 
can be obtained by mak¬ 
ing a call to the following 
REST endpoint: 

I GET/api/friends/{uid} 

Note that the uid that 
has to be provided is the 
UUID of the user, and it 
is not the identifier of, for 


example, the Twitter or Facebook 
account. DaliCoreSocial keeps track 
of the OnlineAccount instances (for 
example, a Twitter or Facebook 
account) that are coupled to this 
user. As described earlier in the 
"Application Logic" sec¬ 
tion, the rest request will 
return all the friends that 
are on all this user's cou¬ 
pled networks. The code 
snippet in Listing 8 shows 
how to obtain the friends. 

We used the DataFX 
framework for making a 
call to a REST endpoint 
and to parse the results. 
DataFX was described in 
a previous issue of Java 
Magazine. 


The RestRequestBuilder will cre¬ 
ate a NetworkSource that makes 
a request to the back end and 
calls the method associated with 
the rest/api/friends/{uid} path. 
The ObjectDataSourceBuilder cre¬ 
ates an ObjectDataSource that 
will parse the result of the REST 
call. We assume the informa¬ 
tion will be available in XML, and 
the different entities are tagged 
with the name "friend." The enti¬ 
ties are converted to instances of 
the Friend class and added to the 
ObservableList< Friend > friends. 

Visualizing the list of friends 
is done in the ProfilePane class. 
The code in Listing9 shows how 
we listen for changes in the list of 
friends. We loop over all the new 
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Figure 7 


friends and create a UserDetail 
node for them. This node is added 
to a FlowPane. The result of this 
application is shown in Figure 7. 

Conclusion 

In this article, we showed how 
your application can integrate 
with large, existing social network 
systems. Authentication, privacy, 
and permissions are important 
concepts for all social media. The 
DaliCoreSocial module deals with 
these concepts, and provides Java 
developers with an easy-to-use 
framework that can be used to 


integrate social network users and 
functionality into your applica¬ 
tions. It is important to note that 
the same approach works for Java 
EE applications (including Web 
clients) as well as for Java desktop 
applications or a combination of 
the two. </article> 


/learn more 

• Johan Vos' blog 

• lohan Vos' YouTube screencast on 

DaliCoreSocial 
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IMS Services API—Getting Started 
with JSR 281 

Learn how to bring IP Multimedia Subsystem services to Java-enabled devices. 

VIKRAMGOYAL 




PHOTOGRAPH BY 
JONATHAN WOOD/ 
GETTY IMAGES 


T he IP Multimedia 
Subsystem (IMS) 
involves the evolution of very 
basic telephone and data 
exchanges into a modem 
exchange system, powered 
by a plethora of high-capacity 
devices and networking lines. 
Driven by the recent explo¬ 
sion in internet and high- 
end devices, Java ME, which 
is installed on billions of 
devices worldwide, is strate¬ 
gically placed to take advan¬ 
tage of this. 

Here, I offer a brief intro¬ 
duction to IMS technology, 
followed by a discussion of 
JSR 281, the IMS Services 
API, which attempts to bring 
the IMS to Java-enabled 
devices. Finally, I will pro¬ 
vide some simple code using 
the latest Java ME SDK for 
mobile phones (version 3.2) 
and the LG Session Initiation 
Protocol (SIP) server, which 


provides an implementation 
of this API. 

Let's get started. 

What Is the IMS? 

The IMS is an architectural 
framework that helps with 
delivering multimedia ser¬ 
vices that use the Internet 
Protocol (IP). It was origi¬ 
nally defined bythe3GPP 
(3rd Generation Partnership 
Project) as a standardized way 
for wireless mobile devices to 
distribute internet-based ser¬ 
vices. However, it is broader 
nowand covers multiple net¬ 
work and media types. 

The architecture defines a 
centralized exchange-type of 
system that advertises its ser¬ 
vices. End users can connect 
their devices to this central¬ 
ized service and gain indi¬ 
vidual identities. Multimedia- 
based messages and data 
are sent to these identities 


via pipes that provide for 
simultaneous transfer of the 
data. Therefore, instead of an 
old-style telephone exchange 
system, which provides for 
only one kind of media trans¬ 
fer (voice), the IMS can easily 
handle multiple media trans¬ 
fers simultaneously. 

This exchange of data can 
take place between services 
without a human element 
present, as in video or audio 
streaming where an end 
user consumes the data 
without needing to have 
a physical entity present 
at the other end. The end 
user is dialing into a service 
that would have advertised 
itself previously with its own 
unique identity. Business- 
to-business transactions 
are also possible, as long as 
individual identities have 
been established and a con¬ 
nection is possible based on 


pre-existing criteria 
and contracts. 

Identity on an IMS net¬ 
work is established using SIP 
(RFC 3261—essentially, your 
e-mail address) ora "tel" URI 
(RFC 3966—essentially, your 
phone number). An end user 
or service may have multiple 
such identities, and the user 
can be reached on one, some, 
or all of these identities, at the 
same time. This is the beauty 
of an IMS-based system. 

I have used the example 
of telephony so far, which 
would be the most common 
use. However, the structure 
of IMS precludes no par¬ 
ticular data and is, therefore, 
media agnostic. You could 
easily use movies delivered 
over this architecture to illus¬ 
trate its usage. 

A commercial IMS system 
would control the function¬ 
ality of the whole network 
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and provide the basic structure 
to get the system going. Thus, it 
would seamlessly integrate all 
available networks and provide 
authentication and authorization. 
Further, it could actually look up 
new networks and services and 
provide them to the end user 
for use. A recent example of this 
service is the Push-To-Talk feature 
that has been tried successfully by 
several telecommunications com¬ 
panies. Each IMS system should 
be able to advertise its services (or 
capabilities) when new subscrib¬ 
ers connect to it. 

If an IMS device provides new 
capabilities, these need to be sepa¬ 
rately identified. For each service 
that is standard, the 3GPP defines 
a standardized identifier called 
the IMS Communication Service 
Identifier (ICSI). For services that 
are new or localized to your applica¬ 
tion, the IMS Application Reference 
Identifier (IARI) is recommended. 

One final pointto note about 
the IMS is that it doesn't matter 
how a user connects to an IMS 
network; it always provides the 
same services to the end user. So 
a user could connect to a local IMS 
network via Wi-Fi at home, to a 3G 
or4G network while traveling, and 
to a fixed-line network when at 
the office. At each place, the user 
experience within the IMS will be 
the same. 


i- 


Java ME and the IMS 

java is present on a plethora of 
devices (not just mobile phones, 
but set-top boxes as well), so it 
is ideally suited to use the IMS. 
JSR 281, a step in this direction, 
defines an API that can be used to 
create an IMS-ready application 
that can siton anyjava-enabled 
device that implements this API. 

A device that implements 
JSR 281 provides the IMS engine— 
an execution environment that 
an IMS-ready application can 
interface with. The application 
itself is defined with the following 
parameters: 


■ IMS application identifier 
(Appld), which is a string that 
identifies your application 
(potentially from among other 
IMS applications on the same 
device) 

■ The MIDIet, which handles the 
application logic and—in JSR 
281 lingo—is said to be the 
"owningjava application" 

The IMS engine stores these 

properties in the registry within 
the IMS device. This registry is 
used to identify the properties that 
define the capabilities of the IMS 
application. 

Application developers need to 


define this registry by writing 
the capabilities within the Java 
Application Descriptor (JAD) or 
Java archive (JAR) manifest file. 
This is the static method of install¬ 
ing an IMS application on an IMS- 
capable device. JSR 281 also allows 
developers to dynamically register 
their application from within the 
MIDIet by using the classes in the 
javax.microedition.ims package. 

The capabilities are defined in 
the registry by using at least one 
of the properties described in 
Table 1: StreamMedia, BasicMedia, 
FramedMedia, Event, or 
CoreService. The capability declara- 
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PROPERTY NAME 

PROPERTY MEANING 

EXAMPLE PROPERTY VALUES 

SAMPLE DECLARATION 

1 StreamMedia 

MEANS THAT YOUR APPLICATION CAN STREAM AUDIO, 
VIDEO, OR BOTH. 

AudioOR Video OR Audio Video 

MicroEdition-IMS-l-Stream: Audio 
Video 

1 BasicMedia 

MEANS THAT YOUR APPLICATION CAN TRANSFER 

OR HANDLE MEDIA OFTHETYPES DEFINED BYTHIS 
PROPERTY VALUE. 

image/png, text/plain, 
application/myApp 

MicroEdition-IMS-l-Basic: image/png 

1 FramedMedia 

SPECIFIESTHATTHE APPLICATION CAN TRANSFER 
APPLICATION DATA-LIKE MESSAGES AND FILES. YOU 
NEED TO DEFINE THE CONTENT TYPES AND THE SIZE. 

text/plain image/png, 4096 

MicroEdition-IMS-l-Framed: text/ 
plain image/png, 4096 

1 Event 

SPECIFIES THAT YOUR APPLICATION USES THE 
PUBLICATION AND SUBSCRIPTION CLASSES TO 

DECLARE EVENTS RELEVANT TO AN IMS APPLICATION. 

presence 

MicroEdition-IMS-l-Event 

1 CoreService 

Table 1 

DECLARESTHECORE SERVICES THATTHE 

APPLICATION SUPPORTS AND DEFINES ANY 

COMPOSITE PROPERTIES AND SERVICES THAT ARE 
SUPPORTED. 

urn:URN-3gpp:org.3gpp 
.icsi;require,-explicit FOR ICSI 

AND 

urn:IMSAPI:com.myCompany 
.iari.myApp FOR IARI 

MicroEdition-IMS-l-CoreService-1 
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tion must add at least one of these 
properties to identify the capabili¬ 
ties of the IMS application. 

The API itself is divided into 
three packages. 

As mentioned previously, the 
main javax.microedition.ims pack¬ 
age is used to define, configure, 
and install an IMS application. 

The Configuration class provides 
methods such as setRegistryO and 
re move Registry to dynamically 
install applications (as opposed 
to the static method just dis¬ 
cussed). The Connection State class 
is used to monitor whether the 
application is connected to the 
IMS network and, if the network is 


connected, this class allows devel¬ 
opers to find any identities on the 
network. Related to this class is the 

ConnectionStateListener interface, 
implementations of which can 
be used to retrieve notifications 
about changes in the state of the 
connection. Finally, this package 
also defines the Service interface, 
which is the base interface for all 
types of IMS services, including 
CoreService, which is an interface 
defined in the javax.microedition 
.ims.core package. 

The second package, javax 
.microedition.ims.core, contains 
the interfaces and a single class 
that enable the application to 
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LISTING 1 


service = (CoreService) Connector.open("imscore://myApp; 
userId=Vikram sip:vikram@myemail.net serviceld=chat"); 

Download all listings in this issue as text 


create and provide the IMS ser¬ 
vices (in other words, the capa¬ 
bilities). At the heart of this is the 
CoreService interface, which pro¬ 
vides methods for calling remote 
peers over the IMS network. The 
CoreServiceListener implementa¬ 
tion of this interface is also used to 
listen for incoming connections. 

An example usage of this interface 
in shown in Listing 1. 

The CoreService is what 
enables connections and ses¬ 
sions within an IMS network, 
but it is the ServiceMethod inter¬ 
face and its implemented inter¬ 
faces— Capabilities, PageMessage, 
Publication, Reference, Session, 
and Subscription —that are used 
to inspect and manipulate the 
messages that are transmitted 
within each session. The messages 
themselves are represented using 
the Message interface, but any 
manipulation of messages should 
be left for advanced IMS applica¬ 
tions only. The MessageBodyPart 
interface allows an IMS applica¬ 
tion to create ad hoc body parts 
to attach to each message that is 
transmitted. 


Each implemented interface 
of the ServiceMethod interface 
has a related listener inter¬ 
face attached. Thus, for the 
Capabilities interface, you can 
use the CapabilitiesListener; for 
PageMessage, you can use the 
PageMessageListener; and so on. 

The final package, javax.micro 
edition.ims.core.media, is used 
to help with the transmission of 
media (BasicMedia, FramedMedia, 
and so on). Consequently, it pro¬ 
vides the BasicReliableMedia, 
BasicUnreliableMedia, 
FramedMedia, and StreamMedia 
interfaces. As the names sug¬ 
gest, BasicReliableMedia is used 
to transmit media over TCP, 
BasicUnreliableMedia is used 
to transmit media over UDP, 
FramedMedia is used to transmit 
data that is delivered in packets, 
and StreamMedia is used for media 
that can be streamed in real time. 

A Simple IMS Application 

In this section, I will walk through 
a simple IMS application for regis¬ 
tering new users to an IMS server. 
More-detailed applications can be 
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built on top of this application. 
Setting up. To get started, down¬ 
load the LG Java Mobile S DK. 
because we will use the emula¬ 
tion platform provided by it for the 
development of this MIDIet. It also 
provides a SIP server to test our 
MIDIet against. 

Once you have the LG SDK 
downloaded, add it to NetBeans 
as another emulator platform. 
(NetBeans should auto-detect 
whetheryou are in the right sec¬ 
tion.) Make sure you select IMS 
Services API 1.1 from the optional 
packages list. 

Start the SIP server provided by 
the LG SDK by runningthe emula¬ 


tor environment. To do this, run 
the installation folder\ bin\ 
ktoolbar.exe file, and then select 
File -> Utilities -> Start SIP Server, 
as shown in Figure! 

The LG SDK also provides the 
means to specify the location of the 
SIP server using the imsserver.ini 
file. This file is located in the 
installation folder\ LGJ P _ S D K _ 12 \ 
appdb directory. Open the file and 
set the named variable com.lge.ims 
.ims_uri to the location of your SIP 
server (which is likely to be just 
the name of your machine; I tried 
using a local IP address, but that 
didn't work). You can leave the rest 
of the entries as is (at least for the 


O SIP Proxy & Registrar 
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Registered: 



vikram 
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A. V 


REGISTER sip: vikra-pc: 5060 SIP/2,0 

Call-10; 9b80f5i79556db4 Io47b70aa6fc52919@l 2 1.222.8.222 
CSeq:1 REGISTER 

Via: SIP/2.0/UDP 121.Z22.8,222:53Z61;branch«z9hG4bK7d61I9&4d4ef0abfa0eG9173cbb20e81 
Max-Forwards: 70 

From : <sip:vikramt®oracle, com > j tag=1 1 77084272 
P-Preferred-Identity ; sip; vikram@orade , com 
To; <sip;vikram@oracle,com> 

Authorization ; Digest redm= h lge , com", r esponse= M "j nonce="", uri="sip :scscf .home, net", us ername="java 1 " 
Contact : <slp:L21. 222. 3, 222:53261 >j+g.oma.sip-im , large-message 
Expires: 600000 
Content-Length: 0 

Figure 2 
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A 


MicroEdition-IMS-l-Identity: com.oracle.test, IMSLaunchMIDIet 


Download all listings in this issue as text 


purposes of this simple example). 

Next, there are three basic steps 
involved in creating a useful IMS 
application: 

■ Registering your application 
with your device 

■ Networking with an IMS server 
and declaringyouridentity 

■ Connecting a call and applying 
any media data, if applicable 

Registering your application. To 
registeryour application, you can 
either use the JAD manifest way 
orthe dynamic way (asl men¬ 
tioned earlier). In this example, I 
have chosen to declare and reg¬ 
ister my application via the JAD 
manifest file. 

The most important manifest 
entry that you need to provide is 
the MicroEdition-IMS-l-Identity 

property. This property shou Id 
be set to the ID of your applica¬ 
tion and the fully qualified MIDIet 
name. See Listing 2 for what I used 
for this application. 

Networking with an IMS server and 
declaringyour identity. In the test¬ 
ing world, networking with an IMS 


server is difficult to do because not 
many full-fledged IMS servers are 
publicly available. Fortesting pur¬ 
poses, I used the SIP server bun¬ 
dled with the LG SDK. There are 
some online SIP servers, but they 
are not reliable. (See this listing of 
pubjjc SIP servers.) 

To start, use the code shown in 
Listing 3 to declare your intentions 
to the IMS server. 

Notice the connection string. 

It starts with imscore and then is 
followed by the predictable HTTP- 
like characters //. Then, the next 
thing is actually the application ID 
that we declared in the previous 
section. Separated from this by a 
semicolon is the user who is mak¬ 
ing this request; this has a familiar 
e-mail syntax, preceded by sip. 

The effect of this code is to reg¬ 
ister the user using the ID vikram(5> 
oracle.com with the IMS server 
defined in the previous section. 

Figure 2 shows the response on 
the SIP server side. 

Connecting a call and applying any 
media data, if applicable. Next, we 
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LISTING 4 LISTING 5 


Session mySession = 
myCoreService.createSession( 

"siprvikram@oracle.com", "sip:lisa@oracle.com"); 
mySession. setListener(this); 


Download all listings in this issue as text 


need to create a session to initi¬ 
ate a conversation or interaction. 
This is typically done by using the 
Session class, as shown in Listing4. 

This code assumes that the user 
on the other end (lisa@oracle.com) 
has accepted your session initia¬ 
tion request. 

Once created, the session can 
be used to transfer any sort of data 
that the two end users and their 
devices are capable of, and all data 
can be transferred simultaneously. 
For example, the two users could 
initiate a chat application; have a 
text-based chat; and then during 
the same session, send data in the 
form of framed media (such as 
pictures or videos). See Listing 5. 

Once the media type has been 
set, the session can be started. The 
actual creation of media is left for 
the developer of the application. 
Forthat, the developercan use the 
Mobile Media API (JSR135). 

Conclusion 

The IP Multimedia Subsystem is 
a useful technology for leveraging 


internet-capable devices to deliver 
multimedia content seamlessly 
and reliably. Java ME takes full 
advantage of this by providing an 
implementation via JSR 281. 

In this article, I introduced you 
to JSR 281 and how it fits within 
the whole IMS ecosystem. I 
started with an introduction to 
the IMS and then showed how 
JSR 281 implements the IMS 
architecture and enables devel¬ 
opers to create applications 
based on this platform. Finally, 

I showed the steps required for 
creating a session within a 
MIDIet with this API. </articie> 

/learn more 

• IMS specification 
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Swing into Mobile 

Use the Lightweight Ul Toolkit on Nokia Series 40 phones. 
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REHACHAKROBORTY, 

ANDANNAZHUANG 


BIO 


ou've probably used 
Swing to create UIsfor 
your desktop applications. 
The rich simplicity of Swing 
inspired the development of 
the Lightweight UIToolkit 
(LWUIT), and this technology 
is now ready to use on the 
world's most popular mobile 
phone platform, Series 40. 

With smartphone-like 
features at a budget price, 
Series 40 powers the latest 
Nokia Asha Touch phones, 
such as the Nokia Asha 311 
and the Nokia Asha 308, 
shown in Figure! Series 
40's capabilities are driving 
demand for Asha phones, 
and with that demand has 
come ever greater interest 
from users for smart apps, 
driving record downloads 
from the Nokia Store. 

With an estimated 675 
million Series 40 phones in 
active use every day, there is 
a huge potential market for 
your apps. With support for 
in-app purchase and in-app 


advertising, as well as inte¬ 
grated operator billing pro¬ 
vided by the Nokia Store, the 
tools are there to monetize 
yourapps. 

In this article, you will dis¬ 
cover how to take advantage 
of the demand for Series 40 
apps by leveraging LWUIT 
through smart develop¬ 
ment tools and distribution 
through the Nokia Store. 

LWUIT: Simplifying 
Mobile Apps 

If you have flirted with mobile 
apps development, you might 
have been put off by not hav¬ 
ing a modern UI framework, 
needing to code everything 
yourself to the canvas, and 
having to build your own UI 
framework and controls for 
anything interesting or use¬ 
ful. "Why can't I just use 
Swing?" you might have won¬ 
dered. You were not alone, 
and so LWUIT was born. 

By providing a set of rich 
UI components, LWUIT 


simplifies many of the typi¬ 
cal challenges you might 
face when creating apps for 
mobile phones. These com¬ 
ponents mean that with less 
effort, you can create apps 
that have compelling user 
experiences. Another advan¬ 
tage is that LWUIT comes 
with built-in support for 
touch- and keypad-based 
UIs, as well as multiple 
screen resolutions. With 
good design—by separating 
the UI from the app logic— 


you will be able to build a 
single UI that runs across 
multiple UI styles in different 
screen orientations and sizes 
and on devices with a range 
of form factors. And you can 
see this demonstrated in 
several LWUIT for Series 40 
example applications on the 
Nokia Developer Website. 

LWUIT Comes to Series 40 

Nokia has a long tradition of 
supportingjava in its plat¬ 
forms and creating robust 
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and easy-to-use tools for develop¬ 
ers. Adding LWUIT to the Series 40 
platform was a natural extension 
of this tradition. The first goal was 
to ensure that LWUIT was avail¬ 
able for all the UI styles found on 
Series 40 phones: the full-touch 
UI, the touch-and-type UI (a 
unique hybrid of touchscreen and 
ITU or QWERTY keyboards), and 
the nontouch UI. 

Next, LWUIT for Series 40 had 
to offer users the same look and 
feel as the underlying UI. In Series 
40, Nokia has already created a 
set of UI styles that provides users 
with a great 
user experience 
on phones that 
have relatively 
small screens. 
Therefore, 

Nokia optimized 
LWUIT so it 
better matched 
the platform UI 
styles. For exam¬ 
ple, the LWUIT 
text area and 
text field were 
tightly integrated 
with the native 
Series 40 text 
editor found in 
more-recent 
phones. 

To benefit fully 
from the scal¬ 


able UI components, LWUIT for 
Series 40 adds built-in support 
for dynamic orientation change in 
full-touch phones. 

The touch UI is one of the key 
features of Nokia Asha mobile 
phones, and it provides support 
fora wide variety of gestures. 
Therefore, Nokia optimized and 
tightly integrated LWUIT for Series 
40 with the native touch UI using 
a simple yet elegant solution: the 
GestureHandler helperclass (part 
of the com.nokia.lwuit package), 
which can be used in your LWUIT- 
based apps, as shown in Listing 1. 

Another key aspect of the 
LWUIT port to Series 40 is 
memory consumption and per¬ 
formance. Several key compo¬ 
nents—such as Form, List, and 
HTMLComponent—have been 
improved. In addition, UI widgets' 
usability has been improved for 
Series 40. 

Designing with LWUIT 

The three UIs used in Series 40 
phones have their own unique 
characteristics. While there is 
much in common amongthe 
different UI styles there are differ¬ 
ences, most notably between the 
full-touch UI (shown in Figure 2) 
and the two UIs where a keyboard 
or keypad is present: the touch- 
and-type UI and the nontouch UI 
(shown in Figure3). 


A SINGLE UI 


By separating 
the UI from the 
app logic, you 

can build a single 
UI that runs 
across multiple 
UI styles in 
different screen 
orientations 
and sizes and 
on devices with 
a range of form 
factors. 
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LISTING 1 


Form form = new Form(); 

GestureHandler 

handler = new GestureHandler() { 

public void gestureAction(GestureEvent e) { 
switch(e.getType()) { 
case GesturelnteractiveZone 
.GESTURE_TAP: 

//handle tap 
break; 

case GestureInteractiveZone.GESTURE_LONG_ PRESS: 
//handle long press 
break; 

case GestureInteractiveZone.GESTURE_ FLICK: 
//handle flick 
break; 

} 

} 

}; 

//set handler to receive gesture events only when the 
// form is visible. Every form can have its own handler. 

GestureHandler.setFormGestureHandler(form, handler); 
//Creating another handler 
GestureHandler g = new GestureHandler!) { 
public void gestureAction(GestureEvent e) { 

//handle event 

} 

}; 

//if you want to always catch gestures, set the handler 
// as a global handler. There can be only one global handler. 
GestureHandler.setGlobalGestureHandler(g); 

□ Download all listings in this issue as text 


For example, all the Series 40 
UIs employ a drill-down approach; 
back-stepping is hierarchical 
(not historical). By default, all the 
UIs have the back function in the 


lower right of the screen and in the 
Options menu, but the Options 
menu is repositioned in the full- 
touch UI.The primary action 
(called the default command in 
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LWUIT) is automatically mapped 
to the action button in the header 
bar of the full-touch UI and to the 
middle softkey in the other UIs. 

By default, the LWUIT for Series 


= Scrolling 


^Action button 2 
{Options) 

Motion button 1 
{primary action) 
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-TitleBar 40 px 
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Content 
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Figure 2 



Figure 3 


40 application layout displays title 
and softkeys (or actions), but the 
application can be set explicitly to 
full-screen mode to provide more 
space for content. 

All the familiar LWUIT features 
are available, to enable the easy 
creation of impressive user inter¬ 
faces. You can, for example, define 
application layout as a grid instead 
of the ordinary one-column layout. 
You can also use subtle anima¬ 
tions (for single components) or 
transitions (for application views). 
Note, however, that excessive use 
of the effects is not encouraged, 
to ensure that application perfor¬ 
mance is good on all possible tar¬ 
get phones. This is the area where 
developers may wish to consider 
feature variation based on phone 
capabilities; that is, build in more 
eye candy for more-capable 
phones such as the Nokia Asha 311. 

One of LWUIT's unique benefits 
is the ability it provides for you 
to easily create custom themes 
using the LWUIT Resource Editor 
tool. Using the tool, it's possible to 
customize the LWUIT for Series 40 
themes for a branded look and feel 
while maintaining a consistent UI. 

The Des igning for Series_40 
section of the Nokia Developer 
Design and User Experience Library 
provides much more detail on this 
subject and is well worth visiting 
before you start design work. 
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Building Your LWUIT Apps for 
Series 40 

Get the right tools. You build apps 
for the latest version of the Series 
40 platform using the Nokia SDK 
2.0 for lava . The SDK can be inte¬ 
grated with NetBeans or Eclipse, 
but the best experience will come 
from using the Nokia IDE for java 
ME (Eclipse), which is installed by 
the SDK. 

The Nokia IDE has a numberof 
Nokia-specific features, such as a 
tool to help you locate the Series 
40 SDKs you need and an editor 
for the Nokia-specific attributes 
in your apps'java Application 
Descriptor (jAD) files. 


LWUIT is included in the 2.0 
SDK. To use LWUIT in your apps, 
you simply add its java archive 
(JAR) file to your app's build path 
and start adding LWUIT compo¬ 
nents, as shown in Figures4 and 5 
Beyond that, the development 
process will be pretty much as you 
would expect for a desktop app. 
The differences come when you 
start testing. 

Test your app. To test you r a pps, 
you run them in a PC-based emu¬ 
lator. With the emulator, you are 
able to test virtually all aspects of 
your application, including loca¬ 
tion features or accelerometer 
sensors. You will want to test your 



o 

o 


o 

< 


< 

5 


~3 



CO 


I- 

=) 

O 

CO 

< 



f 




java 

.net 


blog 



Figure 4 


83 
























































































//mobile and embedded / 



Figure 5 


apps on a phone, too, but the 
emulator makes initial testing 
faster. Figure 6 shows the Nokia 
SDK 2.0 for Java emulator running 
a LWUITdemo app. 

And when it comes to testing on 
a phone, don't worry about getting 
access to Series 40 phones—you 
ca n access a ra nge of Series 40 
phones overthe internet using the 
Nokia Developer Remote Device 

Access service. 

Obfuscate your code. It is essential 
to obfuscate your code, because 
you include the LWUITJAR in each 
application you build, and it adds 
up to 800 KB to each app's distri¬ 
bution file. By obfuscating, you can 


reduce this overhead to below 
350 KB, depending on the com¬ 
plexity of the app (that is, how 
many LWUIT classes it uses). 

Getting Started and Where to 
Get More Information 

You can find more information on 
creating Java apps for Series 40 
on the Nokia Developer Website. 

In addition to the SDK and design 
library, check out the videos and 
Webinars in the Learning section 
and the Java Developer's Library. 

Getting started with LWUIT is 
just as easy. You can start from the 
LWUIT for Series 40 project home 

page, where you can learn and 
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Figure 6 

download the tools. Another rec¬ 
ommended resource is the video 
introduction Get Started with 
LWUIT for Series 40, which you can 
watch on the YouTube channel 
(which includes many other vid¬ 
eos about developing with Java for 
Series 40). In the LWUIT video, 
you will see how to set up the 
tools, codeyourapp, testyourapp 
in the emulator, and get your app 


running on a Series 40 phone. 

There is also a lively community 
forum in the Nokia Developer Java 
Tools discussion_board, where 
you can post questions and join 
fellow developers in technical 
discussions. 

A Final Word 

With the introduction of LWUIT, 
you will be able to create apps with 
a rich UI quickly. Then, with good 
design, apps can run unchanged 
overthe range of Series 40 phones 
to coverthe full-touch, touch-and- 
type, and nontouch UIs. 

Because Series 40 phone users 
are beginning to demand more 
and more apps, now is a great 
time to start creating apps using 
the LWUIT library for Series 40 if 
you want to give your Java apps 
more reach. </article> 
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Part 2 

Building Actor-Based Systems 
Using the Akka Framework 

Learn how to use the Akka library to do more than create simple actors. 


PHOTOGRAPH BY 
PHILSALTONSTALL 


I n Part 1 of this two-part 
series, we discussed the 
difficulties in building reli¬ 
able, distributed, concur¬ 
rent systems, and we briefly 
explored the concept of an 
"actor" for building such sys¬ 
tems. We explored an imple¬ 
mentation of actors on the 
Java Virtual Machine (JVM) 
called Akka, which is part of 
theTypesafe Stack that also 
includes Scala and the Play 
framework. We illustrated 
some simple examples, but 
space constraints prohibited 
a deeper look. 

I simplified the actor story 
a bit to help put the basics in 
place: The Akka documenta¬ 
tion describes an actor as "a 
container for State, Behavior, 
a Mailbox, Children and a 
Supervisor Strategy." We've 
already seen the actor as a 
container for state, in that we 
saw an actor can hold state 


within it, and we've already 
seen the actor as a container 
for behavior, because actors 
contain code. That code, 
however, doesn't execute in 
response to method calls, 
but in response to messages 
sent to the actor via the 
actor's mailbox. This helps 
actors avoid blocking on one 
another, which is a major 
source of concurrency bugs. 

The last two parts of an 
actor—children and super¬ 
visory strategies—become 
important when actors work 
together to accom¬ 
plish some larger 
task, which is 
most of the time. 

The supervisory 
strategy will be a 
large part of how 
we follow Akka's 
ideas for building 
robust systems, 
which, if you recall, 


embraces a "Let it fail" con¬ 
cept ratherthan the "Keep it 
from failing, ever" strategy 
espoused by most traditional 
J2EE/Java EE stacks. 

But let's take this one step 
at a time. 

Minions! Where Are My 
Minions? 

We've already seen a bit of 
how an actors-based system 
is designed in the earlier 
"Hello" and the Pi calcula¬ 
tor examples, but these 
examples had one tiny flaw: 

If something went 
wrong inside the 
actor, the entire 
system (trivial 
though it was) 
would come crash¬ 
ing to the floor— 
and worse, never 
get up again. 

In a trivial sys¬ 
tem that runs in 


the console, this isn't a prob¬ 
lem—the usercan always 
just rerun the command that 
launched the system. But 
in a system that's supposed 
to possess even a modest 
degree of reliability, this isn't 
so good. 

Imagine,fora moment, 
that instead of simply print¬ 
ing to the console, our actors 
are engaging in some "risky" 
behavior, which in this case 
consists of doing anything 
that might throw an excep¬ 
tion. We can mimic this 
by creati ng a case withi n 
HelloActorfrom our earlier 
examples that, in a semi¬ 
random fashion, throws an 
exception when used (see 
Listing 1). 

This is obviously a con¬ 
trived example, but it does 
create for us a failure 
scenario—one that allows for 
at least a certain amount of 


An unbounded 
wait is essentially 
a deadlock or a 
production “hang” 
waiting to happen. 
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recovery—in this case, to just keep 
trying over and over again until we 
finally get messages out. 

But we need to refactor the 
HelloActor design a little: HelloActor 
can't do everything on its own, 
because if the exception is thrown 
so that it escapes HelloActor, the 
actor dies. What we need is to 
establish a new actor that will do 
the "risky" operation, and then use 
that actor from within HelloActor, 
as shown in Listing 2. 

When the code in Listing 2 is 
run, an interesting thing hap¬ 
pens: If the time happens to be 
lucky (or, I suppose, in this case, 
unlucky) enough to end in a zero, 
the exception is triggered, but 
the program doesn't terminate. 
Since the exception is thrown 
from a child actor (one that was 
created from within HelloActor), 
the actor's supervisory strategy— 
which is a OneForOneStrategy by 
default—looks at the exception 
thrown from within the child 
actor. Depending on the strategy's 
directive (a mapping of excep¬ 
tion types to a directive type), 
the supervisory strategy decides 
which of the following to do: 

■ Resume the failed actor's mes¬ 
sage processing (meaning the 
actor didn't suffer a catastrophic 
failure and we can keep using it). 

■ Restart the failed actor (mean¬ 
ing the actor suffered a cata¬ 


strophic failure and we need to 
create a new one to do message 
processing). 

■ Stop this actor. 

■ Escalate the issue to this actor's 
own supervisor (which, in 

the case of HelloActor, will be 
the Akka system runtime) by 
rethrowing the exception to it. 
For example, by default, a 
RuntimeException maps to the 
restart option, which tells Akka to 
restart the failed actor. We know 
this by examining the type of the 
exception in the pattern match 
inside of the actor (see Listing 3). 

In cases where we want entirely 
new behavior, we need to override 
the supervisorStrategy value. The 
canonical way to do this is within 
the actor subtype itself, as shown 
in Listing4. 

There's more to the 
SupervisorStrategy constructor, but 
the parameters maxNrOfRetries 
and withinTimeRange are fairly 
self-explanatory, are described in 
the Scaladocs for Akka, and have 
some generally useful defaults. 

Context Matters 

Notice that the code in Listing 4 
uses the context value, which is 
a bound value built in to every 
actor that provides a reference 
to the actor system in which it 
executes. This is a reference to 
an ActorContext object that has 
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class HelloActor extends Actor { 
def messageOut(msg: String) = { 
if ((System.currentTimeMillisO %10) == 0) 
throw new RuntimeException("NOOO! Even time! The horror!") 
else 

System.out.println(msg) 

} 


def receive = { 
case Start => 

messageOut("Hello, Akka") 
case incoming: RepeatMessage = > 
for (it <- Otoincoming.num) 
messageOut("Repeat:" + incoming.message) 
case incoming: Message => 
messageOutfMessage:" + incoming.message) 
case Stop => 

context.system.shutdownO 

} 

} 


Download all listings in this issue as text 


a number of methods that pro¬ 
vide interesting information and 
behavior for an actor to use: 

■ actorOf: This method is used in 
Listing4 to create another actor 
that will be a child of this actor 
(the one doing the actorOf call). 

■ children: This returns an Iterable 
of references to all the child 


actors of this given actor. 

■ parent: This is the parent of this 
actor. 

■ self: This is a reference to the 
actor itself—this is a little dif¬ 
ferent from the this reference, 
because the self reference is 
to the ActorRef that wraps the 
actor, rather than to the raw 
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object, and in most cases, self is 
the more appropriate of the two 
to use. 

■ stop: This method shuts this 
actor down. 

■ dispatcher: This returns the 
MessageDispatcher used for this 
actor. The MessageDispatcher is 

the strategy by which messages 
are delivered to the actor and 
largely describes the relation¬ 
ship of actors to threads. (For 
example, does each actor have 
its own thread? Or do all the 
actors operate on one thread?) 

■ system: This is the reference to 
the ActorSystem to which the 
actor belongs. 

■ sender: This is the actor from 
which the currently processing 
message came. 

Almost any nontrivial actor will 
use context at some point during 
its execution, as we see in Listing4. 
There are a few other methods on 
ActorContext, two of which we will 
examine later, but for the most 
part, these are well documented in 
the Scaladocsfor Akka. 

Don't Just Stand There! Say 
Something! 

In Part 1, we showed that actors 
can send messages to another 
actor using the ! method, but 
nothing was said about how actors 
could engage in a round-trip 
request/reply. This was a delib¬ 


erate omission on my part: The 
system as a whole functions a 
lot more quickly and smoothly if 
we design it so that all message- 
sends are considered one-way, 
asynchronous communications. 

No blocking means no opportuni¬ 
ties for deadlock. 

It's important to realize that an 
actor can always send a one-way 
message back to the sender of the 
message by using the sender refer¬ 
ence within the actor. So it's always 
possible to do something like you 
can see in Listings 5a and 5b. 

But the problem with this 
approach is that if we fire mes¬ 
sages at a RobinHoodActor using 
the traditional! syntax, as shown 
in Listing 6, what we're going to 
get (see Listing 7) is not quite what 
we'd expect or, most likely, want. 

Because the messages are asyn¬ 
chronous, Robin's messages to his 
men appearto arrive in an out-of- 
order fashion, and certainly the 
results returned to Robin are not 
quite in the order a leader usually 
expects (a response as soon as an 
order is given and before the next 
order is given). 

In this case, it's possible to write 
request/response messages, 
but that approach intentionally 
requires a lot more work because, 
as already mentioned, blocking 
is playing with fire and should, by 
definition, require more thought 
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LISTING 8 


case class RichMan(val kind : String) 
case object Sheriff 
case class Rob(val whom : String) 
case class Hide(val where : String) 
case class JobComplete(val msg: String) 

class RobinHoodActor extends Actor { 
val rightHandMan = context.actorOf(Props[LittleJohnActor]) 
def receive = { 
case rm : RichMan = > { 
println( 

"Robin Hood says, 'Ho, ho! Rob the" + rm.kind + "!'") 
rightHandMan ! Rob(rm.kind) 

} 

case Sheriff = > { 

println("Robin Hood says, The Sheriff! Hide, men!") 
rightHandMan ! Hide("forest") 

} 

casej :JobComplete => 

println("Robin Hood says, 'My men report'" + j.msg +.) 

} 

} 

Download all listings in this issue as text 


and work. Even then, Akka won't 
give us an unbounded block¬ 
ing request/response method. 
Instead, it will asynchronously 
send the message and hand back a 
Future object, which will (at some 
point) receive the result. 

To start with, sending a request/ 
response message uses the ask 
method—orits shorthand equiva¬ 
lent, ?—but a couple of things 
have to be established first, mostly 


dealing with how long the system 
should wait for a response. 

To begin with, assume that we 
have a simple echoing actor, as 
shown in Listing 8. It's annoying, 
but it works. In the sender, once 
the actor is created, the mes¬ 
sage is sent using the ? method, 
which will work only if an implicit 
Timeout object has been created 
beforehand. (Otherwise, there 
will be a compile error. The ask 
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method, on the other hand, is 
less syntactically short but takes 
the timeout parameter explicitly, 
which is sometimes a little easier 
to read.) 

Once that's done, the returned 
object from the? call is mapped to 
a particular future-result type. (In 
this case, because we're expecting a 
string back, it needs to be mapped 
back to a Future[String] type.) Then, 
finally, as shown in Listing 9, we 
need to establish how long we're 
willing to waitforthat Future object 
to be populated with the result 
before the Akka API will allow us to 
actually harvest that result. 

Why all the fuss? Michael 
Nygard, in his book Release It!, 
describes in great detail why 
unbounded waits are a bane to 
production-quality code. So I 
won't get into the details here, but 
in summation, an unbounded wait 
is essentially a deadlock or a pro¬ 
duction "hang" waiting to happen. 
The repeated use of timeout values 
here tells Akka exactly how long to 
wait for each potentially hanging 
operation before recovering and 
continuing execution (givingyou 
the chance to recover from the lost 
message or response). 

Note, though, that certain 
import statements (see Listing 10) 
must appear priorto the code in 
Listing 9 for the code to compile, 
because neither the ask method 


northe? method appears on the 
Actor API. Failing to use these 
import statements will result in 
some truly misleading compiler 
messages. 

Needless to say, Akka is making 
it a lot easier to use one-way mes¬ 
sages, and despite the additional 
work, building redundant and 
fault-tolerant systems fares better 
when doing exactly that. 

Get This to Phil in Accounting! 

Seeing these messages flying 
from one actor to another might 
lead some readers to wonder if 
this isn't a replacement for Java 
Message Service (JMS) or some 
other kind of messaging-oriented 
middleware system. On the sur¬ 
face, yes, there appear to be some 
similarities, particularly when 
routing messages (our next topic), 
but similarities end there on the 
surface, really. A messaging- 
oriented middleware system is 
generally about making the mes¬ 
sages and their delivery a top- 
level concern as something the 
developer wants to see and deal 
with, usually for reasons of dura¬ 
bility, persistence, and so on. In 
an actor-based system, the mes¬ 
sages are almost an implementa¬ 
tion detail; they are used solely to 
help break the blocking nature of 
a method call and (in the case of 
the mailboxes themselves) are not 
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val ma = system.actorOf(Props[MockingActor]) 
implicit val timeout = Timeout(5 seconds) 
val future = (ma ? "Flello").mapTo[String] 
val result = Await.result(future, 5 seconds) 
printlnfReceived result:" + result) 


Download all listings in this issue as text 


something the developer wants or 
needs to deal with. 

However, there are interesting 
parallels between the two kinds 
of systems. One parallel is that of 
creating a "workflow" or "pipeline" 
of actors that can work together 
to accomplish a common goal. It 
might sound "retro," but build¬ 
ing large systems out of small 
pieces—for example, by using 
UNIX command-line tools such 
as grep, sed, awk, and more— is 
by far a more resilient and robust 
way to achieve long-term success 
than by building monolithic large 
"chunks" of code. 

In some cases, these 
chunks of code will be distinct 
and separate actor types (a 
PrintlnActor, a FibonacciActor, a 
Facto rial Actor, or—if we want 
to get out of the mathematics 
domain—a ProcessRequestActor, 
a TransferMoneyActor, a 


NotifyAccountActor, and so on). 

And for some of these, linear 
sequences of steps through each 
(for example, A to B to C to D) will 
work, in which case, we can sim¬ 
ply pass the "next" actor in to the 
previous one. But for others, some 
of the steps will be processed 
in parallel or in some combina¬ 
tion or hybrid thereof. This entire 
subject is called routing in Akka, 
and while there's no way we can 
exhaustively cover all the different 
possibilities, we can explore a few 
simple scenarios. 

Consider creating an actor spe¬ 
cifically for printing to the con¬ 
sole, as shown in Listing 11. In this 
particularexample, we wantto 
have five different instances of the 
PrintlnActor (which we'll be able 
to verify by seeing the "created!" 
message printed when each one 
is instantiated). More importantly, 
when we send 10 messages, we 
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want the messages to be routed to 
each actor in a round-robin fash¬ 
ion, as shown in Listing 12. 

When we run the code, what we 
see is that, indeed, five actors are 
created, and each one receives two 
messages in order, as shown in 
Listing 13. 

The key to this is in the creation 
of the roundRobinRouter, an actor 
that essentially "fronts" the collec¬ 
tion of five PrintlnActors such that 
to the client (main), it appears that 
there's just one actor, while in fact, 
the work is being split across five 
different instances, as we can see 
from the output. 

Akka offers several differ¬ 
ent routers, each with different 
semantics: 

■ The RoundRobinRouter 

will pass messages to 
each actor in a round- 
robin, ring-like fash¬ 
ion, as we've already 
seen. 

■ The RandomRouter 

will, as its name 
implies, hand mes¬ 
sages to a randomly 
selected actor with no 
other consideration. 

■ The SmallestMailbox 
Router will examine 
the mailboxes of all 
the actors under it, 
and hand the mes¬ 
sage to whichever 


one has the smallest mailbox 
(meaningthe least work being 
processed). Note that any 
remote actors will be selected 
last, since Akka can't see the 
mailbox state for actors running 
in remote processes. 

■ The BroadcastRouter will hand 
the message to all the actors 
underneath it in a broadcast 
fashion. 

■ The ScatterGatherFirstCompleted 
Router is a BroadcastRouter but 

with a hitch. It will dispatch the 
message to each actor, but it will 
accept only the results of the 
first actor to return; it will throw 
away the rest of the results. This 
is essentially an implementation 
of the "Scatter-Gather" 
pattern commonly seen 
in messaging systems. 

Although we didn't 
doit, it's possible to 
create routers that 
fluctuate in the num¬ 
ber of actors by creat¬ 
ing a DynamicResizer 
and passing it in 
as a "resizer" argu¬ 
ment when creating a 
router. Another option 
is to create a custom 
router, for example, 
a RedundancyRouter 
that would be similar 
to the ScatterGather 
FirstCompleted Router, 


>kka makes it 
a lot easier to 
use one-way 
messages, 

and despite the 
additional work, 
building redundant 
and fault-tolerant 
systems fares 
better when doing 
exactly that. 
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object Main { 

def main(args: Array[String]): Unit = { 
val system = ActorSystem() 

val roundRobinRouter = 
syste m. a cto rOf (P ro ps [ P ri n 11 n Acto r]. 
withRouter(RoundRobinRouter(5)), "router") 
lto 10 foreach { 
i => roundRobinRouter! i 

} 

} 

} 
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but instead of taking the first 
result, it would take the first two 
results and compare them to 
make sure they're both identical, 
asthey should be.The Akka man¬ 
ual has an example of one, if you 
find the need. 

You Must Become... 
Something Else 

Of course, one of the most com¬ 
mon things that we do when 
building systems is managing 
objects' internal state as clients 
use them in a progressive fashion. 
Akka offers a powerful capability 


for doing this for actors by allow¬ 
ing an actor to change the code 
that responds to the incoming 
messages. This capability hides 
behind the innocuously named 
become method, and at its heart, 
it's a simple mechanism: Each 
time become is called, a different 
method becomes the method that 
is executed when a message is 
delivered to the actor for process¬ 
ing. Consider Listing 14. 

We can send the code in 
Listing 14 some messages (the 
exact type of message is irrelevant 
to our example here, so we'll just 
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borrow the Start message from 
Parti ): 

val pp = system.actorOf( 
Props[PingPongActor]) 
pp ! Start 
pp ! Start 
pp ! Start 

What emerges at the console is 
this: 

I It begins! 

PING 

PONG 

If this leads you to conclude 
that we could build finite state 
machine (FSM) behavior explicitly 
into the actors, you're spot-on. 

As a matter of fact, Akka provides 
some even more explicit support 
for describing an FSM in an actor, 
and the Akka manual describes the 
FSM module in more detail. (The 
become fu nctionality is great for 
lightweight state transitions, but 
for very complex state machines, 
a more rigorous description of the 
states and their transitions will be 
necessary, and this is the support 
provided by the FSM module.) 

We Need to Shoot a Scene in a 
Place Far, Far Away 

It might come as a surprise that, 
as of yet, there's been no mention 
of remote actors. The main reason 


for this is simple: The program¬ 
mer's approach to remote actors 
is, essentially, exactly the same 
as that for local actors, which is 
simply sending messages. The 
only things that are different are 
establishing a configuration that 
allows for remote communication 
(which consists of the right entries 
in a custom text file format that 
Akka can find when runningyour 
code) and specifying howto find 
(or create) the actor on the remote 
system. Neither of these tasks 
substantively changes the nature 
of your interaction with the actor 
northe design of the actor-based 
system as a whole. 

Configuration-wise, Akka will 
need an akka.conf file containing 
the entries shown in Listing 15. The 
actor section says that instead of 
using locaI actors, we now want 
actors that can receive messages 
from across the network, and the 
remote section specifies what 
communication transport and 
various TCP/IP-level details (such 
as the host name and port) to use. 

In order to keep the external 
requirements to a minimum, I'm 
going to embed the configuration 
in the code and read it directly 
using a ConfigFactory (which, by 
the way, is not technically part 
of Scala; the Scaladocis on the 
Typesafe Website). This approach 
is obviously not recommended 
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akka { 
actor{ 

provider = "akka.remote.RemoteActorRefProvider" 

} 

remote { 

transport = "akka. remote. netty.NettyRemoteTransport" 
netty { 

hostname = "127.0.0.1" 
port = 2552 

} 

} 

} 
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for production code. The actor in 
question is shown in Listing 16, 
which is, again, kept deliberately 
simple to allow us to focus on the 
important parts. 


Next, we need to establish the 
server on the remote machine, as 
shown in Listing 17. (Again, this 
will be the same machine we're 
running on to keep things simple.) 
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Aside from the configuration 
passed in to the ActorSystem, the 
server code is fairly standard Akka 
code. It creates the actor using 
actorOf, except this time, we give it 
a name in order to be able to find 
this actor from the client. We then 
block on an incoming keystroke 
(using System.in) just to keep the 
process up and running. (Again, 
this is not really recommended for 
production code.) 

The client, then, is also almost 
just as deceptively simple (see 
Listing 18) .The only thing that's 
new is that the method actorFor 
is used instead of actorOf, and the 
parametertoitisa URI describ¬ 
ing where to find the remote actor. 
The format of the URI is fairly 
self-describing, as most URIs 
are, and most of the informa¬ 
tion was contained in the server's 
configuration: 

■ The scheme (akka) 

■ The server's ActorSystem name 
(server) 

■ The server's host name (in 
this case, the raw IP address 
127.0.0.1) 

■ The server's port (2552) 

■ The actor's path (/user/actor 
Name, where actorName was the 
string passed in when the actor 
was created using actorOf on 
the server) 

When building the code, note 
that the system will now depend 


on a few more .jar files, notably the 
akka-remote JAR and the external 
dependencies netty-3.5.3.Final, 
jar and protobuf-java-2.4.1.jar 
(from the akka-2.0.3 release), all 
of which are already found in the 
Akka distribution but will likely 
need to be referenced somewhere 
in your build path orthe project 
settings of your integrated devel¬ 
opment environment. 

Conclusion 

Akka is not, by any stretch of the 
imagination, a trivial system to 
master. The concepts are straight¬ 
forward—message passing in a 
shared-nothing environment— 
but making the transition to 
building actor-oriented systems 
can be tricky. Just keep an eye on 
sending one-way messages, avoid 
blocking, and rememberto let it 
fail! </article> 


/learn more 

• Akka Website 

• " java Champion Jonas Boner 

Explains the Akka Platform " 
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object Client { 

def main(args: Array[String]): Unit = { 

val config =. 

akka { 
actor{ 

provider = "akka.remote.RemoteActorRefProvider" 

} 

remote { 

transport = "akka. remote. netty.NettyRemoteTransport" 
netty { 

hostname = "127.0.0.1" 
port = 2553 

} 

} 

} 


val system = ActorSystem ("client", 
ConfigFactory.parseString(config)) 

val actor = 
system.actorFor( 

"akka://server@127.0.0.1:2552/user/actorName") 
println("We have an actor:" + actor) 
actor! "HELLO!!" 
println("Message sent") 

} 

} 
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Xa 4ne h/o v/ember/Pec e«Mbe<r Z01Z 'iss^e, 

Uxson H'A*\4e*' And Borls Sb'Akb'A gAve (as a code 
cbAllen^e Around por4lv\<j UPBC code 4° <ASe 4be Uava 
P e^s'is4ence APX (UPA)- They gAve <as code A 0 ^ a 
pro^rAm 4b^4 was ^edesl^ned 4o wse UPA- 

Tbe correc4 Answer 'is 44 *4. UP A comml40 does a dA4AbA$e 
rollbACk i4sel-f i-f i4 -Ads And 4b&*A t4 closes 4be 4*'^ |, \sAc4iOn. Tbe 
correc4 code looks like 4b1s: 

entityTransaction.begin(); 

try {entityManager.createNativeQuery( 

sqllnsertStatement).executeUpdate(); 

entityTransaction.commit();} 
catch(RollbackException e) {log.info ( 

"Transaction failed and was rolled back");} 
catch(RuntimeException e) { 

if (entityTransaction.isActive()) {entityTransaction 
.rollback();log.error ( 

"Transaction ended abnormally and was rolled back");} 

} 

This Issi/ve’s code c^Allenge comes A 0 "'*' Si won Rl44e*q a Uava 
e^Angel1s4 a 4 O^Ade, wu>o preseAs <as w'Hb *»\ embedded problem- 

1 THE PROBLEM 

Bo4b 4 be Connec4ed Pe^lce C’onA5 l A*'^4lo»A (OPt) And 4 be 
Connec4ed Llml4ed Device Con-fig 1x^41 on (CLPC) <nse 4be. 
Conv\ec4or A^^ework 4° sixppor4 ^er\e*Tc 1np^4 And oia4p^a 4 
4b^o^b a m1n1^Al-Ao4p^1n4 API. CPC A^^S 4be LasIs oT 



O^Ade Uava ME Embedded Oletvf, 
And CLPC A^s 4be LasIs oT 
0<^Ade Uava ME Embedded- 



Hint: Think about 
how data structures 
are reused. 


I*\ eXAJMple, Wt VA St A &A^AjrAw\C2ov\v\tC-[]ov\ \o st 4 <Ap ^ 

4b*4 Us4er\s And processes ^essA^es A 01 ^ cllervfs. Tbe ^essA^es Are o-f 
v/ArlAble ler\g4b, L»a4 neve* - <*\ore 4b A *\ 25G by4es. \AJben 4be AppHcA4lon as, 
some i^essA^es re^HPe wuH-lple ^eAds 4° je4 4be w[^ole ^essA^e. 


Z THE COPE 

How sb°<Ald 4bis code be wodlAed so All messAges Are <^eAd m a single 
ge4P*4*0 caU? 

datagram = connection.newDatagram(256); 


while (notDone) { 

connection.receive(datagram); 
data = datagram.getData(); 
bytesReceived = datagram.getLength(); 

// process datagram ... 

} 

3 WHAT’S THE FIX? 

1) Er\s«A^e 4b*4 4be 4ype oT 4be conr\ec4lon Is UPPPA4AgrAmConr\ec4lon. 

2) M ov e 4be cAll 4° conv\ec4lonmewPA4A^rAm Inside 4be w>b1le loop. 

3) Add a caU 4° dA4A^rAm.rese40 beA^e 4be caU 4® conr\ec4lon.*'eCeWeC). 

4) Add a caU 4° dA4A^rAm.se4Ler\^4b(25G') beA^e 4be caU 4o 
conr\ec4lon.*'ece1v'eQ- 


PHOTOGRAPH BY BOB ADLER, 
ART BY l-HUA CHEN 



THE ANSWER? 

Loor -fW 4He Answer ]a 4He v\e*4 iss^e. CV svvbm'H yoi\r ou/v\ co<4e cH^Ue^je! 
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